e31ad7bd6af6da9c294003eb463a55827bf5f3f3fee4190b0c379552e1593ae0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e31ad7bd6af6da9c294003eb463a55827bf5f3f3fee4190b0c379552e1593ae0
Size

817KB
MD5

4cae12f8eb189e24174aab5b605941d6
SHA1

bb10213d2a4121a667d3ab9dcf69e7af8e07be35
SHA256

e31ad7bd6af6da9c294003eb463a55827bf5f3f3fee4190b0c379552e1593ae0
SHA512

5a128cfdbcd5a5c50a99388f46c607527be90ecb20dd1500fd88aadc384031d004bf178f0e6d25534db034e661fa14861ac83b3bb9568d12e44eccff318b5f49
SSDEEP

12288:HeWukXIwfJ+WlMHz/SvZ80KVdNyDFSmISGx392jF7OelpG/XOydyEayBDKyp3:gktDqHz/SvZ8FdNyDFJGx3SAqeOUDBb

Score

N/A

Malware Config

Signatures

Files

e31ad7bd6af6da9c294003eb463a55827bf5f3f3fee4190b0c379552e1593ae0
.exe windows x86

eeb8eba44d4574a19405a78a47f50970

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
GetFullPathNameW
DeleteFileW
VirtualQuery
GetModuleHandleA
SetThreadPriority
WriteConsoleW
lstrcatA
GetPrivateProfileIntA
TlsGetValue
GetCommandLineA
SetLocaleInfoA
lstrlenW
GetModuleFileNameW
FormatMessageA
GetCurrentThreadId
VirtualProtect
SetCurrentDirectoryW
ReleaseMutex

azroles

AzApplicationDelete
AzApplicationClose
AzApplicationCreate
AzAddPropertyItem

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ