e598e6d92eb1e6b8a5c6cc6ee179447b9df4d31b403bb97bf71a8618eaa6a01b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e598e6d92eb1e6b8a5c6cc6ee179447b9df4d31b403bb97bf71a8618eaa6a01b
Size

177KB
MD5

067a3418a0c19e4a0a03a4515fa6f1f9
SHA1

88afa6fc152e92241e9fd2f0e0e3d5868029218c
SHA256

e598e6d92eb1e6b8a5c6cc6ee179447b9df4d31b403bb97bf71a8618eaa6a01b
SHA512

fda884d2e4f1d78bd8116acb30ab887c0e103b2328099822b48ce8ab65f6e981e51866a75e7b0f57e769224f8895f23947831c3e92056083888cf8e4baa72a69
SSDEEP

3072:ATRTLsx0kDQCkTVsghskrC+B6VxEh40B8XHDADqw3l5GMZuACPygHBSAaiIbeHRr:A9T4xBQCkTwkm+B6VOD8XHDAmw33GM0t

Score

N/A

Malware Config

Signatures

Files

e598e6d92eb1e6b8a5c6cc6ee179447b9df4d31b403bb97bf71a8618eaa6a01b
.exe windows x86

459982fa500e8d7d49c50d5395dea6f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA

user32

CharLowerBuffA
CreateWindowExA
SetWindowLongA
CloseWindow
wsprintfA

advapi32

RegEnumValueA
RegDeleteKeyA
RegSetValueA
RegDeleteValueA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegCreateKeyA
RegCloseKey

Sections

.text
Size: 157KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ