d3ca98bfc66cae08d6006d9678a21d0ba4329ec381576fcfc642b963c44508a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3ca98bfc66cae08d6006d9678a21d0ba4329ec381576fcfc642b963c44508a9
Size

23KB
MD5

28f466b7772a1f73767efdd5d1168dd0
SHA1

e0098433499fab9a957269719ed6a5c8ed489c62
SHA256

d3ca98bfc66cae08d6006d9678a21d0ba4329ec381576fcfc642b963c44508a9
SHA512

bc8200071fd00342776b54f61bd4c75dc7c4a6866bb39f4acaf4a4206a9a87b116d08ff39e4420ba3afdbf7fc2e6f632a59831d5e1dfa835765a5f3410e50440
SSDEEP

384:s6COA4nyy4lfhyenoHA8MmZI8W/8AIWDAXi+O4tyBcXDlDD+BU4JuUCSFCJWe8EI:s6wqyFnyenoHTMmpAElO4NhDe48IM

Score

N/A

Malware Config

Signatures

Files

d3ca98bfc66cae08d6006d9678a21d0ba4329ec381576fcfc642b963c44508a9
.exe windows x86

3864a82b5ccdc9569b59d7ee8be0aeb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeThread
WaitForSingleObject
Sleep
CreateRemoteThread
GetProcAddress
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetModuleHandleA
LoadLibraryA
FreeLibrary
FindResourceA
CreateProcessA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetTempPathA
GlobalAddAtomA
ExitProcess
GlobalFindAtomA
WinExec
GetWindowsDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
GetStringTypeA
RtlUnwind
SizeofResource
LoadResource
CreateFileA
LockResource
WriteFile
GetLastError
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeW

user32

MessageBoxA

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ