dc992c2b9360857357d578cb8a18c3163b4f1a7f7ae4d824a1152680f14b7725 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc992c2b9360857357d578cb8a18c3163b4f1a7f7ae4d824a1152680f14b7725
Size

161KB
MD5

a2851730322c90f62e56c397f07f1588
SHA1

972b640ef544a90ba90ac4703c050fc6315a2290
SHA256

dc992c2b9360857357d578cb8a18c3163b4f1a7f7ae4d824a1152680f14b7725
SHA512

3dee53bd0ca8a6a02439f01d2beae8ef38b692b2792eaded42e160dc5a1346c66fc1f0280ed55867e21565db8f3874b1f4fe01ae8942d9143141281cd3ceefc2
SSDEEP

3072:NJrnSG9tjUmLTbBa5M88XIuAZDRNxdnF1k+xcoZN4WufM3uL6iL:NJrnSG9tjUmLM5b8XcRnd/k+xconTuU8

Score

N/A

Malware Config

Signatures

Files

dc992c2b9360857357d578cb8a18c3163b4f1a7f7ae4d824a1152680f14b7725
.exe windows x86

9a59748f925071559384c33a471093cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
ExitProcess
GetCurrentProcess
CloseHandle
LCMapStringA

user32

wsprintfA
CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA

advapi32

RegEnumKeyA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegCloseKey
RegQueryValueA
RegSetValueA
RegDeleteKeyA
RegEnumValueA

Sections

.text
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ