d77e4441f7c617a255ef61ad9bd7694a9592263bc6c1a3ced8f3c64b71d1e78e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d77e4441f7c617a255ef61ad9bd7694a9592263bc6c1a3ced8f3c64b71d1e78e
Size

26KB
MD5

7232033f8284350cde48d888bf25e32e
SHA1

965714cd84faa8989d03b1329c795fb1ffe41d5b
SHA256

d77e4441f7c617a255ef61ad9bd7694a9592263bc6c1a3ced8f3c64b71d1e78e
SHA512

b1c694c83ada75e6f7792ee8453fbf8db4197f7a4e5eef210f8ad946f2d47c870071e672ed6f36190dc35df5f9b0106844fbd0b12c82d3f4053d2c49ec8d8a34
SSDEEP

384:uLLGdbeXE4Yh/Bn5PCh4z+tqh/H0/l51QniRwzDcFG5J8awxYM5oz60ncGaPoPq:uzCBn9hc6ig4MM5IhcGaYq

Score

N/A

Malware Config

Signatures

Files

d77e4441f7c617a255ef61ad9bd7694a9592263bc6c1a3ced8f3c64b71d1e78e
.exe windows x86

32769e8d7a9c5e7d97fed5a067f0750c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile

advapi32

RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

urlmon

HlinkNavigateString

Sections

.text
Size: 20KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE