ea66bb94418ba8e051cee8061297590ef29b8dd97d83170bdae831553d3206c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea66bb94418ba8e051cee8061297590ef29b8dd97d83170bdae831553d3206c5
Size

664KB
MD5

69bf094375ba9db0f88bde1588a2e259
SHA1

24567a609b08812c918b4eb124551aa0fa125ca3
SHA256

ea66bb94418ba8e051cee8061297590ef29b8dd97d83170bdae831553d3206c5
SHA512

8d8d126b8009bae3fa833ca9714ff1dbe9c73c0455fb042a507a8b22be790e4316747a7e3c4c94eb44d8727e1ff72fbb7a5b0d76f5552975ed009e8d45a17795
SSDEEP

12288:HR+i+abc3k4oGEZENlvLuLna0fFX8h70zoO6aLzUlF4J1OU2Ru4Lk6uYM/VDjGK:KZUoFSL1U02qUl0FOzLHMNZ

Score

N/A

Malware Config

Signatures

Files

ea66bb94418ba8e051cee8061297590ef29b8dd97d83170bdae831553d3206c5
.exe windows x86

04ce883f54d7b432df5df722afcf3bc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess

user32

wsprintfA
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA

advapi32

RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegDeleteKeyA

Sections

.text
Size: 644KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ