f99838f322437d1cf7bc730445ed89b348140ea21192aa64b138b1de233601f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f99838f322437d1cf7bc730445ed89b348140ea21192aa64b138b1de233601f6
Size

452KB
MD5

85edd827aaeee22efe237e9a0e1d0ace
SHA1

bbf570d11bf7afb73c33494e3107690d2429bfb9
SHA256

f99838f322437d1cf7bc730445ed89b348140ea21192aa64b138b1de233601f6
SHA512

5f6c65d7b687027e1f2147c860595307a6c395df12725f040f201f84dd8c5c85215659907932d51504a14d4f99c28bb5660caaa8e914e44c158f369c7a9f4469
SSDEEP

6144:KfgnOhyS7C50NJaEkbsmXHUNnU94lMYLYQpvfC+i0aBel+QoO9bf7E4omAOLwmbn:KonO45l5bVXf94lrYkv6RBs93oniwmT

Score

N/A

Malware Config

Signatures

Files

f99838f322437d1cf7bc730445ed89b348140ea21192aa64b138b1de233601f6
.exe windows x86

b928e0d71dea8fd5dbab6a3a92b8f3c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
GetCurrentProcess
CreateFileA
LCMapStringA

user32

SetWindowLongA
CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegSetValueA
RegEnumValueA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 432KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ