d5e8230a36352b2093e8248425d682fbea0d700afcda97045c9ce092f1b87cbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5e8230a36352b2093e8248425d682fbea0d700afcda97045c9ce092f1b87cbe
Size

206KB
MD5

8b70e0bfb661fc967f8cec1f90727e3d
SHA1

738dd1f4ad0f001673fffe6d01323e56487f1ef1
SHA256

d5e8230a36352b2093e8248425d682fbea0d700afcda97045c9ce092f1b87cbe
SHA512

622c2badc04f6493bd74353bc04437401e87b9defbba58ea406fe5eab97249b9f3211addb6f876f6d7253a456f5e0fac933a8ec92a88a2a4493e2f9855a92250
SSDEEP

6144:3UJMHIKXK18kiOZ/I9Yy2SiY2UBim6r7Pv3:3UJTKaEQuYtVYRBP8H

Score

N/A

Malware Config

Signatures

Files

d5e8230a36352b2093e8248425d682fbea0d700afcda97045c9ce092f1b87cbe
.exe windows x86

246d684b7f094c27ae18fb3affa697a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
LCMapStringA
CreateFileA
CloseHandle
ExitProcess

user32

CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow
wsprintfA

advapi32

RegEnumKeyA
RegEnumValueA
RegOpenKeyA
RegQueryValueA
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegSetValueA
RegCloseKey

Sections

.text
Size: 154KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ