dbf1cdfaf317b5964f8da079e57c57789dbd58203104b8f1593805d88fd28196 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbf1cdfaf317b5964f8da079e57c57789dbd58203104b8f1593805d88fd28196
Size

24KB
MD5

e59fc86dede81b11c15963f08bb0a35b
SHA1

51f44b1546b2fa0659f13d18a0c8d5cc888085e5
SHA256

dbf1cdfaf317b5964f8da079e57c57789dbd58203104b8f1593805d88fd28196
SHA512

b761b99e19d75c23a8111756d3b66a62b14424ccd77c6990b63c887f387d799409cc0ed4a04fe5b913f522e8ba002e9366aa4654e89cc3f62b2557d9bda66477
SSDEEP

384:KtfP2HYp/yFwZu/QZxl8nYKqv2yENrGW/UarnU8g+JajuEh3Dy:WpIK6QrloY1+yENrGg7UX+Jajh3O

Score

N/A

Malware Config

Signatures

Files

dbf1cdfaf317b5964f8da079e57c57789dbd58203104b8f1593805d88fd28196
.exe windows x86

4099ddc5a4cf72d27b12ed57e9ee26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleA
GetProcAddress
GetSystemTime
GetVersion
ExitThread
ReadFile
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE