9854af6842723acccb6252cd5e6691e89a77e35fb4bfa921397d25f274cf1030 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9854af6842723acccb6252cd5e6691e89a77e35fb4bfa921397d25f274cf1030
Size

164KB
MD5

0184be9492cdcb30e9b5b48599618a7a
SHA1

bb52da63361950fb3c8cb05e53853447afe075f6
SHA256

9854af6842723acccb6252cd5e6691e89a77e35fb4bfa921397d25f274cf1030
SHA512

b5ae6996b78fd47b0e2b19f94c7985edd079fe5aa4e57b15ee21a4991a072ef63b11422cf4c12bf61493104ba1ca474c39b61680c91656ecfc4a8347d2e3f64c
SSDEEP

3072:ECLM6hOdok/mY9oZEj3/kA0C3VH3NpIXS4oDahfGMDGu00YrGI0xqh:pLVOFx1N3NqmR50Yb0x8

Score

N/A

Malware Config

Signatures

Files

9854af6842723acccb6252cd5e6691e89a77e35fb4bfa921397d25f274cf1030
.exe windows x86

30b5003521953ff91380056f14e48012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
GetCurrentProcess
LCMapStringA
CloseHandle
CreateFileA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegQueryValueA
RegEnumValueA
RegOpenKeyA
RegSetValueA

Sections

.text
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ