50b47789c65d5c532329dd049b87dcdc06a6266f3b30c55c0b69d66b19d91387 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50b47789c65d5c532329dd049b87dcdc06a6266f3b30c55c0b69d66b19d91387
Size

185KB
MD5

82f0d285758dd9d9b37cb8ebe347d7e8
SHA1

8297a2366ac0d5a2cdff5ba30969c9510f52b8f9
SHA256

50b47789c65d5c532329dd049b87dcdc06a6266f3b30c55c0b69d66b19d91387
SHA512

9cf10cb024dc5d2f8e26dc1b449409e301fbd945d81f6cd2ef81c7a8de2e3e7262728dadbe736e1e91ff950c61ae53af5c8ff8546aa2e73701569faa7c069316
SSDEEP

3072:G7uKAK/arKNV2DZB+4vy4D0+k5WDVE6++mK3aUDLY48NcwM2OHm4slsVt:YuS/aruVOP+4W41KeLY48N9KmVy7

Score

N/A

Malware Config

Signatures

Files

50b47789c65d5c532329dd049b87dcdc06a6266f3b30c55c0b69d66b19d91387
.exe windows x86

0a4dde707a6f944c2357602bc36ccc52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
LoadLibraryA
LCMapStringA
ExitProcess
GetCurrentProcess

user32

wsprintfA
SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegCreateKeyA
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegEnumValueA
RegDeleteKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 141KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ