ed7efb80847d0a9a5fe41d6164cd6e7a3b820b601903290710fec9eb8371f646 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed7efb80847d0a9a5fe41d6164cd6e7a3b820b601903290710fec9eb8371f646
Size

217KB
MD5

ec6b5b86b0df80cd9cc84ae2eec9ea3b
SHA1

05dc6ac3cee3b4be067ce6aa7ee42eed91d282f8
SHA256

ed7efb80847d0a9a5fe41d6164cd6e7a3b820b601903290710fec9eb8371f646
SHA512

0e409bc0dc8e5fa92e4f1f54483aed82c7e4390882f0df4d7701a2f098c858187039b6443ec523c4853ae38efe616007578789a088937d948c90d7563698fccf
SSDEEP

3072:enLcaKzVryceGAYDBd/nAH9iVv52lpa2VExUEepYYNnZ1CqTJK5Uvfg:0KRrycTTDTAHwVv4HSxtc9NZ1CqTJp4

Score

N/A

Malware Config

Signatures

Files

ed7efb80847d0a9a5fe41d6164cd6e7a3b820b601903290710fec9eb8371f646
.exe windows x86

fb59ef50f69822b1394bddbef6db3704

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
CloseHandle
LCMapStringA
CreateFileA
LoadLibraryA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegDeleteValueA
RegCreateKeyA
RegEnumKeyA
RegSetValueA
RegOpenKeyA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegDeleteKeyA

Sections

.text
Size: 151KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ