cf965bcdcec48f28c56e1c86571a0f223299406caeaaa890042b61bfa1752cb4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf965bcdcec48f28c56e1c86571a0f223299406caeaaa890042b61bfa1752cb4
Size

152KB
MD5

6ef50ea9a5ad9676e57a0e97f9203389
SHA1

25b0a1cabcd52f45dc1d964a2241177caedd10f0
SHA256

cf965bcdcec48f28c56e1c86571a0f223299406caeaaa890042b61bfa1752cb4
SHA512

680d612e735467d81c4276343de5e012fc5fe391f487282d9b16198f6ac16cbf8ccec49e8aa30be0f4a310218a5737b5078ed08328c9a626ed3912564ff3140f
SSDEEP

3072:V/jc1mkB072BgSz3eViaG8yQPytuQ/38qxQCOsydE9aA8LiBLn5Bm:Vrf72qq3eZG8y/tuQ0MQLsYEUGBb5A

Score

N/A

Malware Config

Signatures

Files

cf965bcdcec48f28c56e1c86571a0f223299406caeaaa890042b61bfa1752cb4
.exe windows x86

39517e3057e4738d62812f6f58d2c85c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
CryptCreateHash
CryptGetHashParam
DuplicateTokenEx
CryptReleaseContext
RegCloseKey
RegQueryValueExA
RegSetValueExA

shlwapi

wnsprintfW
PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
wvnsprintfA
StrCmpNIA
StrStrW
StrCmpNIW
wnsprintfA
PathMatchSpecW
PathCombineW
wvnsprintfW
SHDeleteKeyA

Sections

.itsp
Size: 38KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hoj
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.knsp
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ