22cb3eb070cca989910a82ff69e9b3074ab795db0b90d4d074b44d52e81b8389 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22cb3eb070cca989910a82ff69e9b3074ab795db0b90d4d074b44d52e81b8389
Size

125KB
MD5

93193d8aa70d9177a1e8783433c53097
SHA1

399b930d07d84f6041fa39ce2396384e98499a8a
SHA256

22cb3eb070cca989910a82ff69e9b3074ab795db0b90d4d074b44d52e81b8389
SHA512

7f86aba85635d396061a7cbea169b364b6ac8284aacd861b49c67596ade8a66c7e54c43532e1c2ee5730160ca850064358b037bd3fe13882390231cbdaa336a2
SSDEEP

3072:n27seRB+b++1Aw+y4YgDSAEj6NAZqq3Dr+FrGno:n27seRB+b++1Aw+y4YgDSAEj6NAkqTZ

Score

N/A

Malware Config

Signatures

Files

22cb3eb070cca989910a82ff69e9b3074ab795db0b90d4d074b44d52e81b8389
.exe windows x86

82e0ae489d6c0182012060e788b078fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
LocalFree
GetLastError
LocalAlloc
GetProcAddress
LoadLibraryA
VirtualFree
VirtualAlloc
FreeLibrary
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
SetLastError
GetTempPathA
GetCurrentProcess
lstrcpyA
GetWindowsDirectoryA
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
ExitProcess
CreateMutexA
GetStringTypeW
GetStringTypeA
CreateFileA
WriteFile
lstrcatA
CloseHandle
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetOEMCP
GetACP
GetCPInfo
RtlUnwind

user32

GetActiveWindow
wsprintfA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetINFClassA
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoA
SetupDiCallClassInstaller

Sections

.data
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE