7b73d6a8dc55deed4847c084f051bded03fe1a9be1b7ad0a8e0a7757eec7066f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b73d6a8dc55deed4847c084f051bded03fe1a9be1b7ad0a8e0a7757eec7066f
Size

309KB
MD5

b03c66f7a0732ce2285244ab59861a6f
SHA1

447f793a8f18d471d5a4d881b91cc28ea2e68afe
SHA256

7b73d6a8dc55deed4847c084f051bded03fe1a9be1b7ad0a8e0a7757eec7066f
SHA512

35e5fe303ad664fe7b12345d56e84d3b53c117662678958cc8138572f55218b12d2828ee2d89ddad9de507bac4883219ee39d4c0ffb99b9a127ad04d3b62b853
SSDEEP

6144:fJm++8NpTfStFWSLT4tltIqgEsP5emfWVplUeRUL++Q6cTr:fBJaWkT75FMhVzU/rQ6C

Score

N/A

Malware Config

Signatures

Files

7b73d6a8dc55deed4847c084f051bded03fe1a9be1b7ad0a8e0a7757eec7066f
.exe windows x86

3aaf01acc3c928e52e5a983b034b812f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
InterlockedDecrement
SetEnvironmentVariableA
GetPrivateProfileSectionA
WriteFileEx
GetCurrentDirectoryA
GetPrivateProfileIntA
GetLongPathNameA
lstrcmpA
FindResourceW
GetStringTypeW
GetACP
GetModuleHandleW
VirtualAllocEx
InterlockedIncrement
ExitProcess
GetDiskFreeSpaceW
GetExitCodeProcess
LoadLibraryA
Heap32First
GetPrivateProfileIntA
GetDiskFreeSpaceW
WaitForSingleObject

apphelp

SdbCreateMsiTransformFile
ApphelpCheckExe
ApphelpCheckIME
AllowPermLayer

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE