fa230bb3f5db02067648f8880735c6f94e1f42ff15c444f1cd55eb9018a118bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa230bb3f5db02067648f8880735c6f94e1f42ff15c444f1cd55eb9018a118bd
Size

176KB
MD5

0755d14d2cf628f6b1dd48a49a58e25f
SHA1

6b3a34861f4c9767a7aabe8771aac610e4ad2c53
SHA256

fa230bb3f5db02067648f8880735c6f94e1f42ff15c444f1cd55eb9018a118bd
SHA512

f6b353aed0b1819ff31634ca4851cb75fe605f96d48fd6e7c282a3c16e1f958fc6bb039e05354752535a6e05086a78330c0332610e5c1672da57ffd938bf3766
SSDEEP

3072:f07m1UBqyY+WOZkkkdSN0EPTE2ZmQrPMBGi+w92+Yq2xkk6FmOKKUEsqqThZ:wpq7+NZhTvZmU0BwTCrFmKUEsqqThZ

Score

N/A

Malware Config

Signatures

Files

fa230bb3f5db02067648f8880735c6f94e1f42ff15c444f1cd55eb9018a118bd
.exe windows x86

47db17b78683db6bc7708c3cdb243689

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle
ExitProcess

user32

wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA
SetWindowLongA

advapi32

RegSetValueA
RegCloseKey
RegOpenKeyA
RegDeleteValueA
RegQueryValueA
RegDeleteKeyA
RegEnumValueA
RegEnumKeyA
RegCreateKeyA

Sections

.text
Size: 155KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ