dc4a2ef59e83b40d167c2dd2092c60df513b7e825596618c58ef4e93497b0d10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc4a2ef59e83b40d167c2dd2092c60df513b7e825596618c58ef4e93497b0d10
Size

264KB
MD5

0decce9acec962baef59001aa5f5e420
SHA1

7f59ccd5aadd9cb1b4205ee4d428811593f0455a
SHA256

dc4a2ef59e83b40d167c2dd2092c60df513b7e825596618c58ef4e93497b0d10
SHA512

83efae1e1b20a364a46a5a148db5bf9a34f5e83d33870f5277063c3b351d7e6dda0d04ba344331a60226f17fe2e2d900bbe49dc153f5e6b1fcdfd77e78385a96
SSDEEP

6144:ho66nfZD6bcJQFBGoWL1e5SjizwJ+MLglvO6TovUyEpR:C66fZWBgReoizwtUlW6svUx

Score

N/A

Malware Config

Signatures

Files

dc4a2ef59e83b40d167c2dd2092c60df513b7e825596618c58ef4e93497b0d10
.exe windows x86

543c9cc540f6b4306c1cac9e251f71a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

strncmp
perror
malloc
free
exit
fread
fopen
fgets
strrchr
fclose
fwrite
printf
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
sprintf
getenv
_XcptFilter
_iob
fprintf
_exit
__p___initenv
_strdup
_stat

kernel32

GetModuleHandleA
GetModuleFileNameA
QueryPerformanceCounter
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE