f3a4a650cb8c32ea6136d455f3d9f630ada9a3c8c49c17341a0e4661f5669500 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3a4a650cb8c32ea6136d455f3d9f630ada9a3c8c49c17341a0e4661f5669500
Size

246KB
MD5

1b082d091c61f24cb179bcc1cc0caf71
SHA1

4a9c54031da17fb2dd6c37d27607ea98e26f46e2
SHA256

f3a4a650cb8c32ea6136d455f3d9f630ada9a3c8c49c17341a0e4661f5669500
SHA512

9f635b60a9ecdbe98e30c0865fb0311581589b3e2ff724ad503605c00bbdcaa296e1545823943cd60d5c94352e5df5207ccbdc68f0fc4a2125daefcc94dcad5d
SSDEEP

6144:xH+pHukYmZEp0edjZ0FUVEd91izTXVMjCc6n:xTk9NMj2Fo3WOp

Score

N/A

Malware Config

Signatures

Files

f3a4a650cb8c32ea6136d455f3d9f630ada9a3c8c49c17341a0e4661f5669500
.dll windows x86

342e9dbaf86e88f4cdc1cff3f8d9fb99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OemToCharBuffA
MessageBoxA
MessageBeep
LoadCursorFromFileA
LoadCursorA
EndPaint
EndDialog
EmptyClipboard
DrawTextA
DestroyCursor
CreateIconFromResourceEx
CreateDesktopA
CopyRect
CharToOemBuffA
CharNextA
ActivateKeyboardLayout

kernel32

lstrcmpiA
ReadFile
MapViewOfFile
InitializeCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleHandleA
ExitProcess
EnumResourceTypesA
EnumResourceLanguagesA
CloseHandle

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 111KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 132KB - Virtual size: 536KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ