d6ebefd2c936db72853bcb38c1fdce9c6be7ed79d9dc29ac9c9bdfe9e6313e8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6ebefd2c936db72853bcb38c1fdce9c6be7ed79d9dc29ac9c9bdfe9e6313e8b
Size

164KB
MD5

8abe663404beb38b00dcb49b9808c05b
SHA1

aacdb893786d9d35fdbec9b498013a702119aab7
SHA256

d6ebefd2c936db72853bcb38c1fdce9c6be7ed79d9dc29ac9c9bdfe9e6313e8b
SHA512

4265e257db048752dd6d78984eb898c229cce7117e7c476ced13e32631d628b32eaead80cf3768d1e23a36174946de77847cdc7b54c3c1dc5cdecdf2fc7d8141
SSDEEP

3072:KsrHegedLBMzGce8ZxSzJvt+B1RyMBl+TE+4tXyjEC/sSuW569QapAV:prHeEzFe8HSVM3RNT+4tXaEKu/QapAV

Score

N/A

Malware Config

Signatures

Files

d6ebefd2c936db72853bcb38c1fdce9c6be7ed79d9dc29ac9c9bdfe9e6313e8b
.exe windows x86

6b848e873a678183afb5b782d7061a6c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
LoadLibraryA
CloseHandle
CreateFileA
GetCurrentProcess

user32

wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA
SetWindowLongA

advapi32

RegEnumValueA
RegCloseKey
RegCreateKeyA
RegQueryValueA
RegSetValueA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA

Sections

.text
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ