c5a8c046c2c618ce4940b0f5651bf0667c46f3216cb2aa008cd317b715e9d419 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5a8c046c2c618ce4940b0f5651bf0667c46f3216cb2aa008cd317b715e9d419
Size

222KB
MD5

4dc4f2bf665f59529c5c034437a13947
SHA1

e0c4fe387111462c0872e2c3ea82d17bd75b7a38
SHA256

c5a8c046c2c618ce4940b0f5651bf0667c46f3216cb2aa008cd317b715e9d419
SHA512

c7e985e52725d426f1488af183fe6f9625cde3979134949482c31fcc8ccabfa88166c840953e0a315218496b4620c25c8cb6a6623a26279a0cded509a5876dc6
SSDEEP

6144:cIJhIvJK+FsMVZEGueXaOSwcme+SNu8jfDJPVxj8LPKAv:cWIxPFsYZFHXgme+SNu4VnwDv

Score

N/A

Malware Config

Signatures

Files

c5a8c046c2c618ce4940b0f5651bf0667c46f3216cb2aa008cd317b715e9d419
.exe windows x86

06570a0ad4cf7bd7c4bca5ac3442e5c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
LCMapStringA
CloseHandle
CreateFileA
ExitProcess

user32

SetWindowLongA
CharLowerBuffA
wsprintfA
CreateWindowExA
CloseWindow

advapi32

RegEnumValueA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegEnumKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA

Sections

.text
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ