340a127aea9a7995f48e47f55564f79527172e4abd03cca9e2938b16a5294039 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

340a127aea9a7995f48e47f55564f79527172e4abd03cca9e2938b16a5294039
Size

159KB
MD5

4df71ecba56ae0702c79453f1dfb5de0
SHA1

95fe909b24abdada196b48e20a742798efe35d70
SHA256

340a127aea9a7995f48e47f55564f79527172e4abd03cca9e2938b16a5294039
SHA512

4e0cb7812a4cdc40a6eea7e84f5dfaf1f3666c9b067408f6c4be13dae87892b99de61ee022cda860746b755c7aa357d8d3652a956ec27258bf2f68b562b401ab
SSDEEP

3072:Lzy/96Nr4hEq0DbETXxaDhTv1jvgvD4fPyy7rDSEOOxDHoZrj/pqR:La96NmhatNc74iqrMBqR

Score

N/A

Malware Config

Signatures

Files

340a127aea9a7995f48e47f55564f79527172e4abd03cca9e2938b16a5294039
.exe windows x86

ef95251f969d668de3891831bda2c383

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CreateFileA
lstrcpyA
lstrcatA
GetWindowsDirectoryA
GetModuleFileNameA
SizeofResource
LockResource
SetFilePointer
FindResourceA
GetModuleHandleA
WinExec
GetTickCount
Sleep
MoveFileA
DeleteFileA
ExitProcess
WriteFile
OpenMutexA
LoadResource
CloseHandle

user32

DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
PostQuitMessage
SendMessageA
RegisterClassA

advapi32

RegSetValueExA
RegCreateKeyA
RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ