bdb8b7d1a95643df9a74bb98a7f113c053020944201f65627fcca75915d120c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdb8b7d1a95643df9a74bb98a7f113c053020944201f65627fcca75915d120c5
Size

197KB
MD5

e182541ee78dfca93fc0789b33713173
SHA1

8d3139ccfbf2713d7c9a963592ae9593ca4ed2f0
SHA256

bdb8b7d1a95643df9a74bb98a7f113c053020944201f65627fcca75915d120c5
SHA512

cab77d2a18c6d67043db4106f6910d2bac973a6c951d402496e850e7b9a8df2447e14b039cc515d14fec9b4d964e0af7e4b65a5c8da08d81a4ba4f1591e1e775
SSDEEP

6144:PTwJbTdIyxFuLt9jSQMipQZWyZ8mweFMk:ghrLuLjBpVk

Score

N/A

Malware Config

Signatures

Files

bdb8b7d1a95643df9a74bb98a7f113c053020944201f65627fcca75915d120c5
.exe windows x86

91f8c4fc1c9058787caf9a413ce0d4cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
GetCurrentProcess
CreateFileA
LCMapStringA

user32

CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA
CreateWindowExA

advapi32

RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegCloseKey
RegSetValueA

Sections

.text
Size: 126KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ