c24e9c6424332dda4213aa17b4b554d7aa7e79ed1aa67516dbf4d2754afb2213 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c24e9c6424332dda4213aa17b4b554d7aa7e79ed1aa67516dbf4d2754afb2213
Size

90KB
MD5

0d7051e77cfda857f9e4cedceaa358dc
SHA1

9890d80ab2783e5016c8770e83c1b549d6025a12
SHA256

c24e9c6424332dda4213aa17b4b554d7aa7e79ed1aa67516dbf4d2754afb2213
SHA512

fa68804033c9d9c7700f9d486a70f524d793a46adb7ff5bf99c3cbdeef33cb545399051b1ef2dc6658a5da8c123e90c48cdcac7c58e4b9a849f36cbd38d34555
SSDEEP

1536:8voTb+gkFyLdfgrYGWPAj1Oky8+aHZZKfOxFEnv2yAXYrIhCuwPcQ1Ok+3dFshL:8vub+gzmYGW4j5y1I/EnwYmCuBddw

Score

N/A

Malware Config

Signatures

Files

c24e9c6424332dda4213aa17b4b554d7aa7e79ed1aa67516dbf4d2754afb2213
.exe windows x86

e57ea438f66b56ede058ee5a99ed5e8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE