4bb5032546791ef9b7347358b8f819c6721796bd41a160b24b29a0ff8fd93ee4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bb5032546791ef9b7347358b8f819c6721796bd41a160b24b29a0ff8fd93ee4
Size

815KB
MD5

839779ff2d2ea3d97a2784e699c265d0
SHA1

87efe354f94c247513777612fc60a04cacc15e6f
SHA256

4bb5032546791ef9b7347358b8f819c6721796bd41a160b24b29a0ff8fd93ee4
SHA512

1f22e4f104b4fd1d042921913657b1e3c62b37b8005ecd9811db064a58a2054ec2fc080d187aa64a9e62a57d32ff29cd0a078a9499d51adb6e3c7e54649eca5b
SSDEEP

12288:BT2rx+HYvFyQHxqa7iLlh5Pu0zxBpaigOeB0jUoZH63i/YMG0Pu4jEfeZ/WAGfJc:d2r/LHxqaeLlh5TV7aije2SiW4j0A

Score

N/A

Malware Config

Signatures

Files

4bb5032546791ef9b7347358b8f819c6721796bd41a160b24b29a0ff8fd93ee4
.exe windows x86

0540031448addf585164aaed6f395e1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
SetCurrentDirectoryA
GetFileSize
SetEnvironmentVariableA
GetTickCount
GetConsoleCP
SetVolumeLabelW
EnterCriticalSection
GetConsoleTitleW
lstrcpyW
FindResourceA
HeapCreate
WriteConsoleA
GetPrivateProfileIntW
GetComputerNameA
GetCurrentProcess
GetModuleHandleA
GetStringTypeA
LeaveCriticalSection

azroles

AzApplicationClose
AzAddPropertyItem
AzApplicationDelete
AzApplicationCreate

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 802KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ