f2b73eccfd56da05a11dc9f26480385993c33658deaf5b207987ba9f71b84079 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2b73eccfd56da05a11dc9f26480385993c33658deaf5b207987ba9f71b84079
Size

362KB
MD5

6d541a9b525ded18b493abc22f38d97f
SHA1

5c474538b976365ed0573ffd78be712218892140
SHA256

f2b73eccfd56da05a11dc9f26480385993c33658deaf5b207987ba9f71b84079
SHA512

24fc838c075a37cc987b180fef8be8685a65b6d60c76137b71c81b97d78acb2ce25639aed6a2db9400694bdaca6c1c5127eb9efd617e1c7ca722ceb5794c3721
SSDEEP

6144:Vrf72qq3eCE2chNjaLJhwkM9TEUH7sL7/lj/t7TfYyQz7hBk2bwVZg/T0:V7SBErDjYO1gLRJ7bmHhB/wV6I

Score

N/A

Malware Config

Signatures

Files

f2b73eccfd56da05a11dc9f26480385993c33658deaf5b207987ba9f71b84079
.exe windows x86

39517e3057e4738d62812f6f58d2c85c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
CryptCreateHash
CryptGetHashParam
DuplicateTokenEx
CryptReleaseContext
RegCloseKey
RegQueryValueExA
RegSetValueExA

shlwapi

wnsprintfW
PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
wvnsprintfA
StrCmpNIA
StrStrW
StrCmpNIW
wnsprintfA
PathMatchSpecW
PathCombineW
wvnsprintfW
SHDeleteKeyA

Sections

.itsp
Size: 38KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hoj
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.knsp
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ