dae7159db92a865ea486242bc74cdfee582ac818b7a6217f549a84f05c2a9daa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dae7159db92a865ea486242bc74cdfee582ac818b7a6217f549a84f05c2a9daa
Size

44KB
MD5

0d3d969780312b9628bf0ff8c1af2c66
SHA1

a0c8c2eed9b548962720da0e5344c39eb7c691b5
SHA256

dae7159db92a865ea486242bc74cdfee582ac818b7a6217f549a84f05c2a9daa
SHA512

3f62a248009c3dfa6cde2ea21b90ccf20754240b458c7c19424a54e21d544c20beb3d18e7871766a5a55376cbe452b07dfc20755ccce2822d21f84a026918054
SSDEEP

768:8+ih+XNXvxYnHoBbqbFL8+cTu9VLk4fjstOCYIGjJSVMw4unFW:WENXvynIBbqxn99jst9YHMVMw4u

Score

N/A

Malware Config

Signatures

Files

dae7159db92a865ea486242bc74cdfee582ac818b7a6217f549a84f05c2a9daa
.exe windows x86

6efdf60df3e294438a907f9bdf3f9442

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateThread
DeviceIoControl
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GetVersionExA
IsDebuggerPresent
ReadFile
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile

wsock32

gethostbyname
WSAStartup
WSACleanup

user32

MessageBoxA

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE