dd86e6639ec413ce309b581b8abb2a30470ce4c32aeefc03ad5b6e434856894e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd86e6639ec413ce309b581b8abb2a30470ce4c32aeefc03ad5b6e434856894e
Size

156KB
MD5

318b94a6beb88acc82b56de5e5b1f4c3
SHA1

b1e0e9a842e1ea94c4c4f82ce328b8d992abd27d
SHA256

dd86e6639ec413ce309b581b8abb2a30470ce4c32aeefc03ad5b6e434856894e
SHA512

1e6109bbb9c45d6348adaf10fb493cbdfed11adede5739797ef0803282225bea69f2623804ae23a9492f56a58ea5c1438dca3eee4decaeb91bb9baea4d1ffb0f
SSDEEP

3072:KNLRgYzwxIcSWl//XiPUowoa/FtNx/sVNZFaNt6:KZ6+wDS8//XiP/Nabj/sVNZFam

Score

N/A

Malware Config

Signatures

Files

dd86e6639ec413ce309b581b8abb2a30470ce4c32aeefc03ad5b6e434856894e
.exe windows x86

7e2a12f679f3c6ab511d8a662990e105

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess

user32

CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow
wsprintfA

advapi32

RegDeleteKeyA
RegEnumValueA
RegSetValueA
RegDeleteValueA
RegQueryValueA
RegCreateKeyA
RegCloseKey
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 137KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ