a82ef0fba8111ea8c1aa59dc80d9b2a033569ea7e7f6e60380f95aa54bd71fcd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a82ef0fba8111ea8c1aa59dc80d9b2a033569ea7e7f6e60380f95aa54bd71fcd
Size

135KB
MD5

542c5b013f18c15660a22764d6aa74e5
SHA1

bd2e16e94898c707a17b29a09a3af3d1155a5091
SHA256

a82ef0fba8111ea8c1aa59dc80d9b2a033569ea7e7f6e60380f95aa54bd71fcd
SHA512

de84fa724a9ff41a551d6367df3b6190bd92a5ec1da0043c63f2dfc428e6e98044169fefb1abd9ee027d71129a9e3d5e34206f1cba75e70126a3669603fd8f26
SSDEEP

3072:pde7HREKwtIcOCUp0ETKsmknUMqiR5b91chL5:XCx+XOt+oKsmuUMvRzqL5

Score

N/A

Malware Config

Signatures

Files

a82ef0fba8111ea8c1aa59dc80d9b2a033569ea7e7f6e60380f95aa54bd71fcd
.exe windows x86

ca5101ba73066a8cde02d19de5dfd54b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegEnumValueA
RegOpenKeyA
RegSetValueExA

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 37KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kakczsx
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE