91f5e1875b976f9cd914bad350e7283631a08ad328fb912b7e02c08a5b870132 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91f5e1875b976f9cd914bad350e7283631a08ad328fb912b7e02c08a5b870132
Size

817KB
MD5

8452bec1c8ab075fe2afeb135d24acec
SHA1

443272c1682588eab648e7bff3c57cb6bef46b8b
SHA256

91f5e1875b976f9cd914bad350e7283631a08ad328fb912b7e02c08a5b870132
SHA512

9c71cffd6eb6d4b070803983c576e6aa67cf7380529666dc0b12f6c5e6145fd134d6a0d6ff6014a604be744422f1393e738b121286ddc7fd1953fc70307e573f
SSDEEP

12288:q/jwdlRJefv+kH6mDvkO03lZABdH8yerXxSRgIGfUUSR2gpFvlUNV:q/Excf1tT03lq3H8tL+z+UV1pFtUv

Score

N/A

Malware Config

Signatures

Files

91f5e1875b976f9cd914bad350e7283631a08ad328fb912b7e02c08a5b870132
.exe windows x86

d9fd8b8ef06c1d957d655677ed5aad57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryW
lstrcatA
GetPrivateProfileIntA
DeleteFileW
VirtualQuery
TlsGetValue
TlsSetValue
GetFullPathNameW
lstrlenW
WriteConsoleW
VirtualProtect
SetThreadPriority
GetCommandLineA
FormatMessageA
ReleaseMutex
SetLocaleInfoA
GetCurrentThreadId
GetModuleHandleA
GetModuleFileNameW

azroles

AzApplicationCreate
AzApplicationClose
AzAddPropertyItem
AzApplicationDelete

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ