cadf90f018cbb32d04cf8b95d0b0ba4557604d2fafcd1fc0c59d9361aad7b42f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cadf90f018cbb32d04cf8b95d0b0ba4557604d2fafcd1fc0c59d9361aad7b42f
Size

104KB
MD5

cb97ac109137000b08d8df789440cffa
SHA1

7a18793bb99afe805f03c82c6099d85891f5ef9e
SHA256

cadf90f018cbb32d04cf8b95d0b0ba4557604d2fafcd1fc0c59d9361aad7b42f
SHA512

42ae8520092d03a37658d17208bf3bfa66407e6c809874950532457010c558250331ee5adefe4c4cb48f0bca5a5c78193581bccf2a1608f5aa0a8caf85e270f5
SSDEEP

3072:V/jc1mkB072BgSz3eVurrkKXDCPQK4BP3YI/T:Vrf72qq3e8rAKX+PM6IL

Score

N/A

Malware Config

Signatures

Files

cadf90f018cbb32d04cf8b95d0b0ba4557604d2fafcd1fc0c59d9361aad7b42f
.exe windows x86

39517e3057e4738d62812f6f58d2c85c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
CryptCreateHash
CryptGetHashParam
DuplicateTokenEx
CryptReleaseContext
RegCloseKey
RegQueryValueExA
RegSetValueExA

shlwapi

wnsprintfW
PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
wvnsprintfA
StrCmpNIA
StrStrW
StrCmpNIW
wnsprintfA
PathMatchSpecW
PathCombineW
wvnsprintfW
SHDeleteKeyA

Sections

.itsp
Size: 38KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hoj
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.knsp
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ