fa5679956736a8bd30f40d3bfb467459bd2b0056d29166fbb80b8a77e443b1a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa5679956736a8bd30f40d3bfb467459bd2b0056d29166fbb80b8a77e443b1a6
Size

6KB
MD5

2878b1c0b4435fdd7a4b935c2456c5ae
SHA1

53f874e3f92892c27903e353ac2b3850c6410e94
SHA256

fa5679956736a8bd30f40d3bfb467459bd2b0056d29166fbb80b8a77e443b1a6
SHA512

8a311fd37ff5b319951c474c8c95bf399f8265f5efbdf42eb62f1a58dadbcfe87a1f4368d2c67ee42abfd1c46f8d32be76fcbe484ba967c991719003adcd5e09
SSDEEP

96:brW92HTaoQwnGDUoAakqe9Bp9fMWonekAC:JleUohSfMWyUC

Score

N/A

Malware Config

Signatures

Files

fa5679956736a8bd30f40d3bfb467459bd2b0056d29166fbb80b8a77e443b1a6
.exe windows x86

72bd7eb9e091eeea42dc93eb1e6fe728

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetSystemDirectoryA
WriteFile
GetProcAddress
LoadLibraryA
Sleep
CreateFileA
TerminateProcess
OpenProcess
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
GetFileSize
CloseHandle
GlobalAlloc
ReadFile
lstrcmpA
GlobalFree
Process32Next
GetLastError

user32

GetWindowPlacement

advapi32

OpenServiceA
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
ControlService

ntdll

RtlInitUnicodeString

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE