cd4f525616645669bc7053d3d3d467911ded27b280634ec1bd66928ac06b0ad6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd4f525616645669bc7053d3d3d467911ded27b280634ec1bd66928ac06b0ad6
Size

230KB
MD5

ae76de3be88ce1737b6e9c31e0d8d9d6
SHA1

94200e9bdf6513e8843d132cc33523a07e8ed4b8
SHA256

cd4f525616645669bc7053d3d3d467911ded27b280634ec1bd66928ac06b0ad6
SHA512

d516f9e0223fb92a14c62f2541309d891becd39648e8ce526e11d2d381ff36d49fc3088174d59fd42df29e1f95e4d02362f68730056df88ccbb1fe797385b272
SSDEEP

6144:SIHfl23IRqXdkJCDQwmYo+OEkEyGpmF0WPY5NstW:SAflnkXdmwmYo+OLGpmF0WPMSW

Score

N/A

Malware Config

Signatures

Files

cd4f525616645669bc7053d3d3d467911ded27b280634ec1bd66928ac06b0ad6
.exe windows x86

81df7b5cf68441a60d4e003e80c07f5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
LCMapStringA
CreateFileA
LoadLibraryA
CloseHandle

user32

wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow

advapi32

RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueA
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 156KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ