72938f08fd87f2f10f0c283c1b798dc410c6ec128bc4862d49b556f2b42a3602 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72938f08fd87f2f10f0c283c1b798dc410c6ec128bc4862d49b556f2b42a3602
Size

78KB
MD5

61f783ee6349d72f692b5ab2fbd5a80a
SHA1

21be8500ae9604793a4879ef2951574ce50df77c
SHA256

72938f08fd87f2f10f0c283c1b798dc410c6ec128bc4862d49b556f2b42a3602
SHA512

492d6f80335e673a0c148e0e8311330f020ed7360b2a1c4e23157f44efdfb9235edb9dfa66d27ea3bf7b5e408cb16ec60dd523930c6687ac8054be27a02e6b92
SSDEEP

1536:9VWXiWg/BqRxYfoMvAJLtag9edSemGe7Xu2Ov9hVY+vWLYdk:iX+qftZa7dSt/Lu2XL4k

Score

N/A

Malware Config

Signatures

Files

72938f08fd87f2f10f0c283c1b798dc410c6ec128bc4862d49b556f2b42a3602
.exe windows x86

0b6ffb7d0b346e9346c57fd735864727

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
WaitForSingleObject
Sleep
CreateFileA
DeleteFileA
WriteFile
CreateMutexA
GetLastError
GetTempPathA
CloseHandle
GetModuleHandleA
GetStartupInfoA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryInfoKeyA

msvcrt

sprintf
strcat
_mbsstr
strlen
printf
_mbscmp
??2@YAPAXI@Z
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcpy
memset

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE