fac602778ad0778bada1680ae844d43753338240e9143f95e000b0c74fb633a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fac602778ad0778bada1680ae844d43753338240e9143f95e000b0c74fb633a3
Size

3KB
MD5

be7bf0493d75b80eed2efd582e9cf0db
SHA1

dd1ffad07ad08ed5705835f292aaf5bcbd1bdeda
SHA256

fac602778ad0778bada1680ae844d43753338240e9143f95e000b0c74fb633a3
SHA512

40e425cf3440ac344640cdc64b11a259698e6d2b7fc2ee35817b60f2b6e93bd7c10ba090bc7dcd23f3bafa5306390578e7e9240aef97f80f744782795aa55f9b

Score

N/A

Malware Config

Signatures

Files

fac602778ad0778bada1680ae844d43753338240e9143f95e000b0c74fb633a3
.exe windows x86

693050dda3d755fe03598f7c5371eef7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThread
CreateToolhelp32Snapshot
ExitProcess
GetProcAddress
LoadLibraryA
OpenProcess
Process32First
Process32Next
Sleep
VirtualAllocEx
WriteProcessMemory
lstrcpyA
lstrlenA

user32

MessageBoxA
GetForegroundWindow

shlwapi

SHSetValueA

Sections

.text
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE