a138c62170337de419230dd0c5e23a3c237b4c451a585bbd92c4d5d8d685b229 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a138c62170337de419230dd0c5e23a3c237b4c451a585bbd92c4d5d8d685b229
Size

168KB
MD5

b5e0edc31f59f17791b056d805b07718
SHA1

fe4e942d2134735087a9520303ef9327f3ed36a3
SHA256

a138c62170337de419230dd0c5e23a3c237b4c451a585bbd92c4d5d8d685b229
SHA512

b32316f58b6c5d33901bc57a5da2b7cc0d6e191239614d1ad70d430aaf3a6e7fe0a3a9aa6b9a480613b8e9bfdaf9a36793091f3cd3e42b69d80d628bf262aff5
SSDEEP

3072:wedqCiCnXuN40BpykYgFP1HZhYYh6wp6nkumhKtpjiOSvNhjYzjPeHaW:wedll+N4zkYcN5hZ64ukujSVhjCjWHaW

Score

N/A

Malware Config

Signatures

Files

a138c62170337de419230dd0c5e23a3c237b4c451a585bbd92c4d5d8d685b229
.exe windows x86

c6a232542c216e267e297658aa7a4eb4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CreateFileA
GetCurrentProcess
CloseHandle
LoadLibraryA
ExitProcess

user32

CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA
wsprintfA

advapi32

RegEnumValueA
RegQueryValueA
RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegEnumKeyA
RegDeleteKeyA

Sections

.text
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ