903e25a8e7921d36634cf8ef8f9fc6ab15bd6608e1b2199c538819e3ee8f20ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

903e25a8e7921d36634cf8ef8f9fc6ab15bd6608e1b2199c538819e3ee8f20ce
Size

160KB
MD5

66596511cb44f43d0b4a4ccb355bd4b1
SHA1

45636404adca70fffd4e3e771abaab1f9c9dcdaa
SHA256

903e25a8e7921d36634cf8ef8f9fc6ab15bd6608e1b2199c538819e3ee8f20ce
SHA512

bcde2d295e90955e82f84f175020d86f4949253319a7fcd371c89daadbcff847f794d65129316da6f80bb49280e50e47745b428fec4b28d862f4562485243b32
SSDEEP

3072:RucZlE5UM+i4v2xXTx+RnPJr2GDkFu9lJsefpLm9vU5vSBj6jq2hf:RBEwiA72G4FUlWefpLmLBjiThf

Score

N/A

Malware Config

Signatures

Files

903e25a8e7921d36634cf8ef8f9fc6ab15bd6608e1b2199c538819e3ee8f20ce
.exe windows x86

9bb0c0740886da03de376ad554b8696b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA
ExitProcess

user32

wsprintfA
CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA

advapi32

RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegEnumValueA
RegCloseKey

Sections

.text
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ