c80f277d8f768432590ae29cc7d140643dfd8e520602f8673f6c46eabe7ec108 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c80f277d8f768432590ae29cc7d140643dfd8e520602f8673f6c46eabe7ec108
Size

2KB
MD5

ad5a4d073cecbc7f15b0e650ca0df782
SHA1

f079fbf23e9c249bf9749727ee08d393bd5b1598
SHA256

c80f277d8f768432590ae29cc7d140643dfd8e520602f8673f6c46eabe7ec108
SHA512

90e901a5a29f5e3a8ef56a7b6c69a01b9b60b648ec7771d074fa4935b1c9a194ad67704501681511aa9d7b2c7969138bae02b4e2662b3874d27301b26300d482

Score

N/A

Malware Config

Signatures

Files

c80f277d8f768432590ae29cc7d140643dfd8e520602f8673f6c46eabe7ec108
.dll windows x86

6fc39f96f87c766adf5446f89fdc6166

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
FindFirstFileA
GetLocalTime
GetSystemDirectoryA
GlobalFree
Sleep
VirtualAlloc
VirtualFree
WriteFile
lstrcatA

ntdll

ZwShutdownSystem
RtlAdjustPrivilege

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegSetValueExA

Exports

Exports

install
on_load

Sections

.flat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE