a0a9cc70641bbb08ced854b22dd275d05f5a4ea57d3f2e3d95c62ad800abd8be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0a9cc70641bbb08ced854b22dd275d05f5a4ea57d3f2e3d95c62ad800abd8be
Size

223KB
MD5

57e81a521a28f7e5addad01378b82a56
SHA1

9f3958c3071e770384d36324f484db1b92ab9634
SHA256

a0a9cc70641bbb08ced854b22dd275d05f5a4ea57d3f2e3d95c62ad800abd8be
SHA512

630c0d69a1a1cd4c18a5afec502067428d8e228a8ae6c9c8ccc699622caf7b1ee63fbbdffc46986f69da6ffa43104d24859c504cc4327ada3d40bd771ea2f45c
SSDEEP

6144:uTXQCfImq0ulsTxCMNq5rw3rqw/S5hnE4UML:uTXVf7q0I5MNq5rUrqwMUML

Score

N/A

Malware Config

Signatures

Files

a0a9cc70641bbb08ced854b22dd275d05f5a4ea57d3f2e3d95c62ad800abd8be
.exe windows x86

c1dbbf01ca2270e1a6d79f68559cc2ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
GetCurrentProcess
CreateFileA
LCMapStringA

user32

CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegSetValueA
RegEnumValueA
RegQueryValueA
RegCreateKeyA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 157KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ