ef188548a59fa19edc29ceccb4b39ad91854d18d4aab83f041ef6ba68389e98d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef188548a59fa19edc29ceccb4b39ad91854d18d4aab83f041ef6ba68389e98d
Size

188KB
MD5

61dce0382cdce9bfb68376b00df0d936
SHA1

e90f561d905d8a2534541fe01f77dcc208ddf1bb
SHA256

ef188548a59fa19edc29ceccb4b39ad91854d18d4aab83f041ef6ba68389e98d
SHA512

c93c1c94f962f54f248af59b7ec608da4344727a4e7708c86ca86abcb1f8242fa7811c465cca976e2678ca1d02eb1b646a783687a96309f0c2fa8c0a337039ce
SSDEEP

3072:mNOVwDjDhPP1lzaPWReXWIXvedAwTZFbAPts8WZYP3PAHWaGlWkQxFwevEZeXOr3:mNBDhPP/0WpIX2ddFFc1f/P31QXxFtWP

Score

N/A

Malware Config

Signatures

Files

ef188548a59fa19edc29ceccb4b39ad91854d18d4aab83f041ef6ba68389e98d
.exe windows x86

cc7252e89af068a319068cc07f1f51bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
GetCurrentProcess
LoadLibraryA
CreateFileA
LCMapStringA

user32

CloseWindow
CharLowerBuffA
CreateWindowExA
wsprintfA
SetWindowLongA

advapi32

RegSetValueA
RegCreateKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ