d489d5b1476f17ec587f4213e9ed49049fac2aa334a88408d0acca328a1024f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d489d5b1476f17ec587f4213e9ed49049fac2aa334a88408d0acca328a1024f2
Size

220KB
MD5

84671d4cc31948268039adffba921f35
SHA1

f17200094db087bb77fd7d38283cd7c69ef279b0
SHA256

d489d5b1476f17ec587f4213e9ed49049fac2aa334a88408d0acca328a1024f2
SHA512

7375351fc7343508606200c65f6ea03ec64d40246264921f2430cddd1cbe96ca52db8d5daaea90eea06cc0a636df302074be1b986c913ccbc794e5815402a679
SSDEEP

6144:kPjZV2bLDp0k9guYiKb2Tfsl6NU/sl0CqHnBVR5/hYv+z:KE9oibGsl0CqHnBBZ1z

Score

N/A

Malware Config

Signatures

Files

d489d5b1476f17ec587f4213e9ed49049fac2aa334a88408d0acca328a1024f2
.exe windows x86

15b63212002b7da2baddd8ca52320d9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
LCMapStringA
CloseHandle
CreateFileA
ExitProcess

user32

wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow

advapi32

RegEnumValueA
RegCloseKey
RegDeleteValueA
RegCreateKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegSetValueA
RegOpenKeyA

Sections

.text
Size: 202KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ