e8786e85d6fa60343366f4c53f0ce9a239461a57251e83ec788f1b7b3eb6e1cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8786e85d6fa60343366f4c53f0ce9a239461a57251e83ec788f1b7b3eb6e1cf
Size

197KB
MD5

aec33bf851544b78c24e2bbd01d79a54
SHA1

ef7486eddc210c67106e892efcaa989270495621
SHA256

e8786e85d6fa60343366f4c53f0ce9a239461a57251e83ec788f1b7b3eb6e1cf
SHA512

066bada48acff85902429c329c42387a6ed51fe817ffcce8bfdc57c8dbe99500006c7245166b58ce47071ad87beea62c5c49dda4be1fbd30ea287bf0bb1abd5a
SSDEEP

3072:QzvH0s8QP+tQWQaplcmSeypvmiB2zG8vclcDgigHLpoXPY1hf4FujLhZN:AvU9t9DS0lvclcEigHLpo/ShwFuRD

Score

N/A

Malware Config

Signatures

Files

e8786e85d6fa60343366f4c53f0ce9a239461a57251e83ec788f1b7b3eb6e1cf
.exe windows x86

fece18aafef16c03fa351fbb0925cbf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
GetCurrentProcess
LCMapStringA
CreateFileA
LoadLibraryA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegCloseKey
RegOpenKeyA
RegEnumValueA
RegSetValueA
RegQueryValueA
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ