f48db478b4ee06a557330de19f2d632eb2c11e353070dbf6b8f6af351f24cfb5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f48db478b4ee06a557330de19f2d632eb2c11e353070dbf6b8f6af351f24cfb5
Size

24KB
MD5

36042191bcf164836df7a106dc002735
SHA1

5c193135a40bac3b170c71f2763f1e46d1a94ed3
SHA256

f48db478b4ee06a557330de19f2d632eb2c11e353070dbf6b8f6af351f24cfb5
SHA512

aa2abeaaab7005799988706c993a7cc98e92f94181dc4a9354bb34dc59c07fc837f4d19e7a424f9e69efcd8dff90596f64dfe9f16d7883372c101ab87e256345
SSDEEP

384:96exbQfDFKqgyv8wnY7waVU/8avdfa9OK+CBDiwIIX9ajuEh3Dy:9x0Y7wy0ndfzeiw/tajh3O

Score

N/A

Malware Config

Signatures

Files

f48db478b4ee06a557330de19f2d632eb2c11e353070dbf6b8f6af351f24cfb5
.exe windows x86

4099ddc5a4cf72d27b12ed57e9ee26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleA
GetProcAddress
GetSystemTime
GetVersion
ExitThread
ReadFile
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE