ae407e4824aaf5fc47e162eb1680905cd8cbdf44581fd30fe55933774ad3b1e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae407e4824aaf5fc47e162eb1680905cd8cbdf44581fd30fe55933774ad3b1e4
Size

244KB
MD5

93b9d4a72d173d570cff614cdd82f5ae
SHA1

bde3c90066f829365d2d494a9993a21eb7747176
SHA256

ae407e4824aaf5fc47e162eb1680905cd8cbdf44581fd30fe55933774ad3b1e4
SHA512

ab8ed161427302351d855fe82aeef6bb093160057ed67ff00acb722a5cfa9a218c20f84d19faf77098b02479fceff50080e3399357989153d27641d13e2b2c25
SSDEEP

6144:hOfBAuu9NjYYWdAtTbjRNRbfRxh8x+kcMYCrpCwG:iAtjKKtTblNRbpxh8x4tim

Score

N/A

Malware Config

Signatures

Files

ae407e4824aaf5fc47e162eb1680905cd8cbdf44581fd30fe55933774ad3b1e4
.exe windows x86

647e6d50be106bd2661be34fe0afae95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
LoadLibraryA
CreateFileA
CloseHandle
ExitProcess

user32

SetWindowLongA
CharLowerBuffA
CreateWindowExA
CloseWindow
wsprintfA

advapi32

RegEnumKeyA
RegEnumValueA
RegSetValueA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyA
RegCloseKey
RegQueryValueA
RegOpenKeyA

Sections

.text
Size: 224KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ