688747fcfb93435cd5c7ec857bcd2e80b9b3946f448f797d3918499b98ff8c22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

688747fcfb93435cd5c7ec857bcd2e80b9b3946f448f797d3918499b98ff8c22
Size

188KB
MD5

24c1c30e067860258df88012dd099fc0
SHA1

a80c938d63d8cf9ceb855a85d654a048eb3149c3
SHA256

688747fcfb93435cd5c7ec857bcd2e80b9b3946f448f797d3918499b98ff8c22
SHA512

be8afd761c286d49328624983ab0e2e9b408d2456b944a55138d3b477abe60598094ca52307aacb7ef1d2a88d32ab1723a604ebcf6eb3deaa657692ab75adea2
SSDEEP

3072:9W+i2txM8LW6HtpPH3fsVb4uTBGVOPqQ11z+mwe+FWBlJiGG4f02nK05r/u:9yCxM8LW6XfsCmBGESQXaqplJf+0J/u

Score

N/A

Malware Config

Signatures

Files

688747fcfb93435cd5c7ec857bcd2e80b9b3946f448f797d3918499b98ff8c22
.exe windows x86

786c6259579741f0a93281bd43a35657

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA

user32

CharLowerBuffA
CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA

advapi32

RegOpenKeyA
RegQueryValueA
RegEnumValueA
RegCloseKey
RegSetValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyA

Sections

.text
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ