4b2e7b331c666266884d88eb969fa91baeed0db85f8ad90435323afc5b6030fc | Triage

Sharing

General

Target

4b2e7b331c666266884d88eb969fa91baeed0db85f8ad90435323afc5b6030fc
Size

3KB
MD5

fcf1312c14d182e861d92f251c00c4e2
SHA1

3c47851685ff4ae998d94dfc3faafd1194debb3f
SHA256

4b2e7b331c666266884d88eb969fa91baeed0db85f8ad90435323afc5b6030fc
SHA512

1601b18cccb1ac7918fb76c63ce75b26aba77f093ae715f762725ab3caa501299c4b090e64ef5fb47ac39bc0b6dc438adebde86066008ac8d704c31c0c888a1d

Score

N/A

Malware Config

Signatures

Files

4b2e7b331c666266884d88eb969fa91baeed0db85f8ad90435323afc5b6030fc
.exe windows x86

4840fed75f3ec84e295f96ca41897373

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCurrentProcess
DuplicateHandle
SizeofResource
CopyFileA
GetModuleFileNameA
LoadResource
CreateFileA
WriteFile
CloseHandle
CreateProcessA
Sleep
OpenProcess

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

msvcrt

_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strrev

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ