f5c1dd7e3087df7d154eabb005cb0205b82c3c6ddcf542c6311918cd79dad2ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5c1dd7e3087df7d154eabb005cb0205b82c3c6ddcf542c6311918cd79dad2ad
Size

26KB
MD5

369214e7dc637f27f57147e1739ec64b
SHA1

22d1bc27b1a7c0036e5e24b4df1db5e0706ce1b5
SHA256

f5c1dd7e3087df7d154eabb005cb0205b82c3c6ddcf542c6311918cd79dad2ad
SHA512

401032dd9c23168ecc4763662e500a41708b3f30f4f2b925e2de2c1aae7c2e7eaf7f44a55199ffd067331119c5d7001ce7193b1fd940a65d53ab655330729546
SSDEEP

768:XCb4Wpv4uFtD1AEUmcqwkHFDP1ptLG0sTsy:U4WppJmZHkH9HzLy

Score

N/A

Malware Config

Signatures

Files

f5c1dd7e3087df7d154eabb005cb0205b82c3c6ddcf542c6311918cd79dad2ad
.exe windows x86

9d19f4db3a97cb5e639433871b4f9c2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess

user32

GetKeyboardType
TranslateMessage

advapi32

RegQueryValueExA
RegSetValueExA

Sections

pec1
Size: 12KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ