75c320ce8990f98e4228d42b92089b07f5b688d3fca3783114f99445658dc71c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75c320ce8990f98e4228d42b92089b07f5b688d3fca3783114f99445658dc71c
Size

21KB
MD5

9ad1c7af568fe98cc6c3b48bf471a08e
SHA1

e857f958b6a5f36ae47c4e92759b76dc4ab45c30
SHA256

75c320ce8990f98e4228d42b92089b07f5b688d3fca3783114f99445658dc71c
SHA512

05decc121dbe14ef2c312dc5106a6bf6bfa52997f2594b6567c8c5da0cd41004f24d3b79f5371f07e3a95cd2f041b8c13dba28ad18a8c5bc4ea2fdcdef38ea40
SSDEEP

384:TnLDLGXrKzpllHiFEh801dvGp/SnjYCfn+oI/FDfXZzoHWDsk:jLp1PiF3p4jrnYftRDsk

Score

N/A

Malware Config

Signatures

Files

75c320ce8990f98e4228d42b92089b07f5b688d3fca3783114f99445658dc71c
.exe windows x86

ff3357c629adaa00f6f0d86be23f113e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetFileTime
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
GetProcessHeap
ResumeThread
GetPriorityClass
OpenProcess
VirtualAlloc
VirtualFree
GetCurrentProcessId
SetLastError
CreateRemoteThread
GetProcAddress
FreeLibrary
GetVersionExA
GlobalMemoryStatus
CloseHandle

user32

CharLowerA

advapi32

OpenProcessToken
LookupPrivilegeValueA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8way
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HaoTian
Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE