e7a14863d38ea3d3ff1209a436fe717a53157c9088401a80fd5d20cf3818486f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7a14863d38ea3d3ff1209a436fe717a53157c9088401a80fd5d20cf3818486f
Size

160KB
MD5

7ff1c7405ce8712d725bdedd0d2c512c
SHA1

cef4b1fa1da30ba1cb8d2590467274f3329ec47a
SHA256

e7a14863d38ea3d3ff1209a436fe717a53157c9088401a80fd5d20cf3818486f
SHA512

ec629da0d685c3273661db8d18d7d9cf957b1f61f15c7567bc4526127d3c9f4e18eb56333444aa7f9ed1195bb46028cbe832bc6696429d4f8cf007b0b0d5153d
SSDEEP

3072:u/TizHvxRYH1304x059wHDi9lDBtjmeQ+TnKvU91muD9R:1z5RYHCu0UH0fQTvU91Zb

Score

N/A

Malware Config

Signatures

Files

e7a14863d38ea3d3ff1209a436fe717a53157c9088401a80fd5d20cf3818486f
.exe windows x86

c72b3a8dc868e78b8f4319afb6c70472

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
LoadLibraryA
LCMapStringA
GetCurrentProcess
CloseHandle

user32

SetWindowLongA
wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegEnumValueA
RegQueryValueA

Sections

.text
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ