b759a34ad53fb7a9fbc90e231b897a140ac66809160b6e550a6efb096b7ff331 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b759a34ad53fb7a9fbc90e231b897a140ac66809160b6e550a6efb096b7ff331
Size

673KB
MD5

2e637f0817db3280226840edf1a448f0
SHA1

0339614af06aae52dc5e4a50d1510f52a59bb146
SHA256

b759a34ad53fb7a9fbc90e231b897a140ac66809160b6e550a6efb096b7ff331
SHA512

11618bf0950397beafc49e3d73b0e6e37d4942b0f2ac26738225085214d97189870067b0a58d4e7b5b254185dd46e3399c8c0e6c4b0683c69f00bbcdfac365b4
SSDEEP

12288:PXIeIF9bot8QBh6XIeIF9bot8QBh6UpXRlP6ppgg2HFZlx6:PIdgh0IdghPBFqmT6

Score

N/A

Malware Config

Signatures

Files

b759a34ad53fb7a9fbc90e231b897a140ac66809160b6e550a6efb096b7ff331
.exe windows x86

93b3db8e844eee43bb2305ea1d8b9aea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
lstrcmpA
GetPrivateProfileStringA
SetEndOfFile
WriteFile
SetFilePointer
lstrlenA
SearchPathA
LoadLibraryA
CreateFileA
lstrcpyA
GetExitCodeProcess
OpenProcess
CreateProcessA
WritePrivateProfileStringA
LocalAlloc
LocalFree
GetCurrentThread
ExitProcess
SetThreadPriority
FreeLibrary
GetProcAddress
lstrcpynA
lstrcmpiA
GetModuleFileNameA
GetCommandLineA
GlobalFree
GetWindowsDirectoryA
GetStartupInfoA
ReadFile
GetFileSize
GlobalAlloc

user32

ShowWindow
CreateWindowExA
LoadStringA
MessageBoxA
FindWindowA
wsprintfA
SendMessageA
CharNextA
CharLowerA

shell32

ShellExecuteExA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegFlushKey
RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegQueryValueExA

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE