846b17b40a2570cb8252c681466a972f8e148afd0ee43d63cb29cbde15ee52d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

846b17b40a2570cb8252c681466a972f8e148afd0ee43d63cb29cbde15ee52d4
Size

164KB
MD5

c759c3ec078d782b04738d98dcbb1bfe
SHA1

df0e4197e9291d3d70e0a15a8acacc57827664b8
SHA256

846b17b40a2570cb8252c681466a972f8e148afd0ee43d63cb29cbde15ee52d4
SHA512

a99201ef9edc78ba0057968504b37439996666c21ea3d1c587e8e38488dcb04436c9c43f11a5952c74e08164bb2a6bb0ebd0ba04263c232f88764421dac9897c
SSDEEP

3072:oOBuJNSBUfpnZ1KcQfKBzAmRGlBskwjjzae6ny+YXdjkcAUBi/:7O4CtZUcMcd4Bsjrae6WlfAUi/

Score

N/A

Malware Config

Signatures

Files

846b17b40a2570cb8252c681466a972f8e148afd0ee43d63cb29cbde15ee52d4
.exe windows x86

f1aeb43e7463a2a5acda19034d80b377

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
LoadLibraryA
LCMapStringA
GetCurrentProcess
CreateFileA

user32

CharLowerBuffA
wsprintfA
CloseWindow
SetWindowLongA
CreateWindowExA

advapi32

RegEnumValueA
RegSetValueA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegQueryValueA
RegCreateKeyA
RegEnumKeyA

Sections

.text
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ