f0f091a12ffb14073c2e20abfe8012d1756fe2d471f2e77bdf3d50d3bb75d574 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0f091a12ffb14073c2e20abfe8012d1756fe2d471f2e77bdf3d50d3bb75d574
Size

25KB
MD5

1f2df7d740c3368e4aa7e5f99ba80885
SHA1

848c84b2d55457896a29d5d2512db0f9ea6438ca
SHA256

f0f091a12ffb14073c2e20abfe8012d1756fe2d471f2e77bdf3d50d3bb75d574
SHA512

cf2ebcc7648342c063871f2db0342e62914d6b2a163f11e7743fb978796ab4a021801a78f73fad6c1df1cb1fa9a0e335abc132cb0ba97933ee564a6c7f76df04
SSDEEP

384:QtfP2HYp/yFwZu/QZxl8nYKqv2yENrGW/UarnU8gyajuEh3DyNsluN:4pIK6QrloY1+yENrGg7UXyajh3OeuN

Score

N/A

Malware Config

Signatures

Files

f0f091a12ffb14073c2e20abfe8012d1756fe2d471f2e77bdf3d50d3bb75d574
.exe windows x86

4099ddc5a4cf72d27b12ed57e9ee26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleA
GetProcAddress
GetSystemTime
GetVersion
ExitThread
ReadFile
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE