dcb6f81a9e1100d9b09be96dfad5658b4b98e030e0f492489923b2cd37a5a5f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcb6f81a9e1100d9b09be96dfad5658b4b98e030e0f492489923b2cd37a5a5f9
Size

92KB
MD5

8137efeeab854f4a96dda43e9b4dfbf0
SHA1

748d38a2e8e8563ad44db64af2d0de3c00874b79
SHA256

dcb6f81a9e1100d9b09be96dfad5658b4b98e030e0f492489923b2cd37a5a5f9
SHA512

c71f80fe9238044c30b02d8640b1912711b23cc1ab532f9b35a956775e7ecaa91e2b861787d1103f72a2001b3696cab08f8df7e09783dd2ae94dd4f9e0a347d4
SSDEEP

1536:Vty0gA754xSWTakiiPAGJhXvhAjyxduTl8tiou7g3LAJ5g:Oc754wWTvVR/Xvujyf5u7g3L05g

Score

N/A

Malware Config

Signatures

Files

dcb6f81a9e1100d9b09be96dfad5658b4b98e030e0f492489923b2cd37a5a5f9
.exe windows x86

5250d0c5eacf5348177fc285ddeee7e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegCloseKey

msvcrt

perror
malloc
fclose
fwrite
free
strncmp
fread
strspn
strcspn
fgets
strchr
strrchr
_putenv
fopen
exit
printf
getenv
__mb_cur_max
calloc
sprintf
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_iob
fprintf
_pctype
_isctype
memmove
strpbrk
_exit
_strdup
_stat
_spawnv
_strnicmp
_stricmp
_close
_open
_read
_lseek

kernel32

QueryPerformanceFrequency
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
QueryPerformanceCounter

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE