b126d721bdce0e8eb807efbfce423e010907e5f1578a44a9905d87468a4b3687 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b126d721bdce0e8eb807efbfce423e010907e5f1578a44a9905d87468a4b3687
Size

326KB
MD5

37d0f035f3b2eecb9c2fd6ca7ff2aed5
SHA1

dd14fd1289d59368fa0b200b3e33c33f42f5c050
SHA256

b126d721bdce0e8eb807efbfce423e010907e5f1578a44a9905d87468a4b3687
SHA512

21746ef2e3035ab1896ac5598f6d66e9adbf81638829f07c910342bd6116f9b2ef42fae61660beea6260a26d30aa1ac49e3ced7cf2084cd2adbba33b157c9e84
SSDEEP

6144:uow88jFh2oTZ23rPmdbMIQ7nBCPO+d8u7LkUehiRMDwdHue6oAh7UVa2+rl:Dw88jFZT0PmmIR/57nehiW0aoAh7UVQB

Score

N/A

Malware Config

Signatures

Files

b126d721bdce0e8eb807efbfce423e010907e5f1578a44a9905d87468a4b3687
.exe windows x86

b2b25b51bbb04f4881965d1108d82d74

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
DuplicateTokenEx
CryptCreateHash
RegDeleteValueW
RegCloseKey
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW

kernel32

FindResourceW
InitializeCriticalSection
GetThreadPriority
CreateFileW
HeapReAlloc
DeleteFileW
OpenMutexW
GetTempFileNameW
lstrcpyA
CreateDirectoryW
ResetEvent
GetModuleFileNameW
SystemTimeToFileTime
lstrlenW
GetProcessTimes
GetProcessHeap
GetFileSizeEx
GetExitCodeProcess
GetLocalTime
GetComputerNameW
ReadFile

shlwapi

PathFindFileNameW

Sections

.ypwzid
Size: 38KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mpqvmh
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ter
Size: 6KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ