ed57da6b055768691b25fa5eb0ac95d2409d1e1463f36c2b299d5c4c5f30d4bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed57da6b055768691b25fa5eb0ac95d2409d1e1463f36c2b299d5c4c5f30d4bb
Size

8KB
MD5

52a225ba5e92f4270f4b5f3b35d31a96
SHA1

51da955b5f1f16d781e5e40c27d6de8e5e81137b
SHA256

ed57da6b055768691b25fa5eb0ac95d2409d1e1463f36c2b299d5c4c5f30d4bb
SHA512

b7a012004071c662f3b85e550d40852c8d1954c75cf36d36788a37c1ff087c34c5733a83c3553592183e97790fa670a91e0b055bb4f51cb5426f2904f84a0dde
SSDEEP

192:+V7njjcuSwzgpdNVoVDmCP+mcL3+YGIP1oyni5:+9QuupWDmCNcLZG+1c5

Score

N/A

Malware Config

Signatures

Files

ed57da6b055768691b25fa5eb0ac95d2409d1e1463f36c2b299d5c4c5f30d4bb
.exe windows x86

cea2fe02eca65f2eef27e29577738892

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForDebugEvent
DebugActiveProcess
OpenProcess
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
GetCurrentProcess
Process32Next
DebugSetProcessKillOnExit
CreateToolhelp32Snapshot
ReadProcessMemory
VirtualProtectEx
VirtualQueryEx
WriteProcessMemory
SetThreadContext
GetThreadContext
OpenThread
GetModuleHandleA
ContinueDebugEvent
FreeLibrary
Process32First
GetStartupInfoA
CloseHandle

msvcrt

sprintf
sscanf
memcmp
_strcmpi
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcat
strlen
strstr
memset
atoi
memcpy

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE