cb540f3f1e1b0f5b6c1c47db599ec8102d2899a39734a11e8c0b4bbea729236d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb540f3f1e1b0f5b6c1c47db599ec8102d2899a39734a11e8c0b4bbea729236d
Size

17KB
MD5

d24b7aef1b79ed384f7490ad4f8269f9
SHA1

a2cea92fc36a235aca01be5add77a1863dd6352c
SHA256

cb540f3f1e1b0f5b6c1c47db599ec8102d2899a39734a11e8c0b4bbea729236d
SHA512

86d221d19e8ba361a4fdc9a18391f98d9b4c69881a35c3ac824a43695a903482507df0febd8ef93fbc54e6738c39457c329a054eb98d7d66a8fe6f79d0c68bb4
SSDEEP

384:Vg2jsm/r36015I8jXyJhYwHdo9qcxFYW:VgiJnPr0YwHdo99

Score

N/A

Malware Config

Signatures

Files

cb540f3f1e1b0f5b6c1c47db599ec8102d2899a39734a11e8c0b4bbea729236d
.exe windows x86

9732ac678aa6876ffe18938c1226284d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CloseHandle
ReadFile
lstrcmpA
CreateFileA
UnmapViewOfFile
CreateThread
WriteFile
lstrlenA
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
FreeResource
LockResource
GetTickCount
LoadResource
FindResourceA
WinExec
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
HeapFree
GetProcessHeap
HeapAlloc
SetFilePointer
LoadLibraryA
SizeofResource
GetProcAddress

user32

CharLowerA
RegisterClassExA
CreateWindowExA
wsprintfA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
TranslateMessage
GetMessageA
DefWindowProcA

advapi32

RegCloseKey
RegCreateKeyA
RegSetValueExA

wsock32

ioctlsocket
socket
WSAStartup
connect
recv
send
closesocket
gethostbyname
inet_addr
htons

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ