c3d79d11ec352537629a35bc0b32715e982bb6ce01124eb3c37ed7d3d5fb092f | Triage

Sharing

General

Target

c3d79d11ec352537629a35bc0b32715e982bb6ce01124eb3c37ed7d3d5fb092f
Size

3KB
MD5

109eed4496e3a401414b0f807f6ae54d
SHA1

10f04d5f386b6f388c227d358d05c7ea4b588e36
SHA256

c3d79d11ec352537629a35bc0b32715e982bb6ce01124eb3c37ed7d3d5fb092f
SHA512

03728645b68de58eeb6003733f840c1830e013f218d6e46d7e437a0a0fa2beb4f968d325a33e02a56970bae61316789a3935a69532df93f73187ad45af59f2f1

Score

N/A

Malware Config

Signatures

Files

c3d79d11ec352537629a35bc0b32715e982bb6ce01124eb3c37ed7d3d5fb092f
.exe windows x86

5683142612ae2f923aa2a76627f2f3f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
OpenProcess
Process32First
Process32Next
GetProcAddress
VirtualAllocEx
WriteProcessMemory
lstrlenA
ExitProcess
CreateToolhelp32Snapshot
Sleep
CreateRemoteThread

shlwapi

SHSetValueA

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE