c599cf2b61e5b7d068b615f1382e873efcfa40a6b7304dfbb3d2d348a0809f84 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c599cf2b61e5b7d068b615f1382e873efcfa40a6b7304dfbb3d2d348a0809f84
Size

80KB
MD5

a63c25878d45b6dcada4b1e90dadc79f
SHA1

af1f49a04a5e4478e6952e5833af9c270fbd2a26
SHA256

c599cf2b61e5b7d068b615f1382e873efcfa40a6b7304dfbb3d2d348a0809f84
SHA512

7a97e1949537a4693a24a5324529aaacfdde3d24c2b861d9f33648d1d930029e36e72eb68037c22ca302afa05c96ff9d0277d0edebfd2ea640354cf87de7b173
SSDEEP

1536:JpOWESIWjFulGEPNGA73tictT0Hp4noA14cVR6peUVethLFlGVp+2tkgRc9:JpOWESljFDE4YAqTI4oA14cH6peoeXLb

Score

N/A

Malware Config

Signatures

Files

c599cf2b61e5b7d068b615f1382e873efcfa40a6b7304dfbb3d2d348a0809f84
.exe windows x86

55c210bf339923d28d3f67304e5ff52c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
GetEnvironmentVariableA

advapi32

RegQueryValueExA

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE