a7b89aade71e76736353926ed9400b2c9a047370ff45268e5dadc351f0aad24b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7b89aade71e76736353926ed9400b2c9a047370ff45268e5dadc351f0aad24b
Size

189KB
MD5

69e9a1a526e69e3658d0828f57bd48d8
SHA1

1e069807b66564e4cf53bd29d3a649e4e6dbc354
SHA256

a7b89aade71e76736353926ed9400b2c9a047370ff45268e5dadc351f0aad24b
SHA512

010cf36998c20a28711486426d9da7fb3bb82a89d341b4c703b4354696286e099e6901672746e931565a3c4c65fb2474a944b50d32e50470e7cbebb7af1fbed8
SSDEEP

3072:FIxc7xgCufprW7JVBOoarCoSikt1mAYrdLAifAjaRtb931VCpl0GRWQzztE:ac7xMZWtVkrCo8iduBI31V+eGRWQzz2

Score

N/A

Malware Config

Signatures

Files

a7b89aade71e76736353926ed9400b2c9a047370ff45268e5dadc351f0aad24b
.exe windows x86

52f7defea1cec3146f0110211bc273fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
LCMapStringA

user32

wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegDeleteValueA
RegSetValueA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegEnumValueA

Sections

.text
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ