b096958e018cc9c9675b92a4ef9ae99730c91610c7048748e6f3da6f5f9bf051 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b096958e018cc9c9675b92a4ef9ae99730c91610c7048748e6f3da6f5f9bf051
Size

3KB
MD5

c439055a585bcee0368b74447d706e1b
SHA1

387e6c6657a8f428a5243ff479a42db27d495d2f
SHA256

b096958e018cc9c9675b92a4ef9ae99730c91610c7048748e6f3da6f5f9bf051
SHA512

9192bc5938183c0a0e8595d7dae084f8e8831be85b6b7d73afedb2f7e2b2364edf646bb00c64c7514f619691d45930e4f0e5fd887e2be7d7f4a62045c87e4f27

Score

N/A

Malware Config

Signatures

Files

b096958e018cc9c9675b92a4ef9ae99730c91610c7048748e6f3da6f5f9bf051
.dll windows x86

79064e09c5fe78335ec29d140e18454b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegReplaceKeyW
GetUserNameW
RegCreateKeyExW
RegQueryValueExA
RegRestoreKeyW
GetUserNameW

kernel32

CompareStringW
VirtualAlloc
RtlUnwind
GetVersionExA
GetVersion
SetEvent
LocalSize

Sections

.text
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 442B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ