cf66c5c03b7d986c591cca8eb84a564760d650661743701930c412be17b4f3ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf66c5c03b7d986c591cca8eb84a564760d650661743701930c412be17b4f3ef
Size

91KB
MD5

7bf2015ca02fdb4436254e52566240f4
SHA1

08cbf67933169cdd567a389506c60be261ffd17d
SHA256

cf66c5c03b7d986c591cca8eb84a564760d650661743701930c412be17b4f3ef
SHA512

c77999111d5551f8405b4a51b0e4c6cdddab607c0de2e0b1952db3246752efb6839e85e55be812f4221aa486dd1a8d17a191491bb0fc6e5408c3f674a6eeb60f
SSDEEP

1536:xSRiYUEAJLoub/g5NJ7rqljLRWbdV9fHhKlBZMWyaavLnW19Pfj43wRzquK0R7RB:xSRiYUE0n/g5jS5VWBV9fBwZRgTC9Prf

Score

N/A

Malware Config

Signatures

Files

cf66c5c03b7d986c591cca8eb84a564760d650661743701930c412be17b4f3ef
.exe windows x86

8ba12bdfa74a27e146598d74691c199d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

urlmon

URLDownloadToFileA

Sections

.text
Size: 25KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE