faa972f7b8ed3aac609a2950a6cfa13830fae82404955d7b7b6c3df9693cb6f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faa972f7b8ed3aac609a2950a6cfa13830fae82404955d7b7b6c3df9693cb6f2
Size

205KB
MD5

7d091156a7c9ae5829d483609f5b716f
SHA1

d30da55fcc3afb615e92a24da7b60bc62124233e
SHA256

faa972f7b8ed3aac609a2950a6cfa13830fae82404955d7b7b6c3df9693cb6f2
SHA512

0b272a948246696c1dcd48e33b19bf8c1ebdfad71d8537749db652b7c646d14be7a4f355ab613ee0bf09ba5f5fe3adab9c039cb63c4e408ae0f4c1ef9ce6f0d0
SSDEEP

3072:G+pdJpg99zuW0e1qxmlxlCzMn/RAez+DAMi0qUH08DPfAfUjGitCDcPaotepMJd6:rpdvSV3xlXn5+UMdqUHfbfkvqPaotPX6

Score

N/A

Malware Config

Signatures

Files

faa972f7b8ed3aac609a2950a6cfa13830fae82404955d7b7b6c3df9693cb6f2
.exe windows x86

d129dab2b563578f2a987d5787ddfbcf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
ExitProcess
CreateFileA
GetCurrentProcess
CloseHandle

user32

CreateWindowExA
CharLowerBuffA
SetWindowLongA
wsprintfA
CloseWindow

advapi32

RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
RegEnumValueA
RegSetValueA

Sections

.text
Size: 163KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ