f04e7411c13d4ab5f05c0f309320b6c03cd01d6a6764bdc93e6f76043ab2f04f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f04e7411c13d4ab5f05c0f309320b6c03cd01d6a6764bdc93e6f76043ab2f04f
Size

168KB
MD5

02af0d94ee60ee02e49746ed13b8157b
SHA1

085a2d421a5e6d121fb59ead0d7d4bb2dee71960
SHA256

f04e7411c13d4ab5f05c0f309320b6c03cd01d6a6764bdc93e6f76043ab2f04f
SHA512

888816883a7488a7666b8e46cb52745db3eb3ee225b217f34e1bea1d60a65ada8bf0ca8d65ed3ad8fae28a8f604ca5fbec74ac7c35eaae3fd5d276783716ed40
SSDEEP

3072:KJYu8sEfseNPjXuWTitlpoOC6B2ovIgDLH/VMtwnLIWSFkW6YgqUz:KJYu8vf3Pzn6nfDL6KkeXYgqc

Score

N/A

Malware Config

Signatures

Files

f04e7411c13d4ab5f05c0f309320b6c03cd01d6a6764bdc93e6f76043ab2f04f
.exe windows x86

57545453b64f213427c5563dbc90c94c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
CloseHandle
GetCurrentProcess
LoadLibraryA
CreateFileA

user32

SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegEnumValueA
RegSetValueA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA

Sections

.text
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ