cfec6466d7fe1991ac974094b64d4e544a4ac0479a25d4162f9808c95b9c7680 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfec6466d7fe1991ac974094b64d4e544a4ac0479a25d4162f9808c95b9c7680
Size

112KB
MD5

784b18d2ac88bf1b5ecf38779c60f363
SHA1

b61757bb234d9036ffe3446b98f0b4a6aa67539d
SHA256

cfec6466d7fe1991ac974094b64d4e544a4ac0479a25d4162f9808c95b9c7680
SHA512

b3ce34eddbbdc4b9ca1a8e3f12ad64ef2db573315e7d2193679695800a86093d2289dd1cfaf9469299b6b0ac4567c7631f1f2100afbd9de5a202d0393c35567a
SSDEEP

1536:Fgf3SnkIeSgv8rOB0+tCc/DrFqDHGd8Y08SHHZrwRBvWpTwuWYq2FoqhU4d/T:GfSkIeSK8r2dFwC8fH+BepTw1YbFoRG

Score

N/A

Malware Config

Signatures

Files

cfec6466d7fe1991ac974094b64d4e544a4ac0479a25d4162f9808c95b9c7680
.exe windows x86

5250d0c5eacf5348177fc285ddeee7e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegCloseKey

msvcrt

perror
malloc
fclose
fwrite
free
strncmp
fread
strspn
strcspn
fgets
strchr
strrchr
_putenv
fopen
exit
printf
getenv
__mb_cur_max
calloc
sprintf
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_iob
fprintf
_pctype
_isctype
memmove
strpbrk
_exit
_strdup
_stat
_spawnv
_strnicmp
_stricmp
_close
_open
_read
_lseek

kernel32

QueryPerformanceFrequency
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
QueryPerformanceCounter

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE