facde248e68379ea2f8a40e7c10f7b255b31c262104697867d7b4bcc52191c3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

facde248e68379ea2f8a40e7c10f7b255b31c262104697867d7b4bcc52191c3d
Size

3KB
MD5

e97efcf77e337e6676255893ca50c4e4
SHA1

71a6a0938841edd261159e00420d650fce9944ad
SHA256

facde248e68379ea2f8a40e7c10f7b255b31c262104697867d7b4bcc52191c3d
SHA512

b6e7d0bddb5a73b26cede2f85c17bcb94d949d6b00e75803bbdbc9cdffea6391fed1efb74bad7bbd3a71caf194e2bd053a4495cf1ba26d964fed1526826d2887

Score

N/A

Malware Config

Signatures

Files

facde248e68379ea2f8a40e7c10f7b255b31c262104697867d7b4bcc52191c3d
.dll windows x86

d54541650ec461b9978d7404a71a66de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegEnumValueW
RegQueryValueExA
RegCloseKey
RegReplaceKeyW
RegCloseKey
CloseServiceHandle

kernel32

VirtualAlloc
LoadLibraryExW
GetVersion
CreateMutexW
CreateEventA
SuspendThread

Sections

.text
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ