90200449ae5eb6417dab827544fdd0be9246eecd8bfeb26c3f9727be7dbc70ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90200449ae5eb6417dab827544fdd0be9246eecd8bfeb26c3f9727be7dbc70ca
Size

49KB
MD5

15e3954cdd22a61bf31d0e0eb2f73479
SHA1

a71423a8088cadcfa87f50788715e2178344084c
SHA256

90200449ae5eb6417dab827544fdd0be9246eecd8bfeb26c3f9727be7dbc70ca
SHA512

e4e9618e6691a15434f45176b40a150b100e8bac21b2157b0e28dc08e1474770f469a39aecc8c53138df40a1cb0b307853dd3d6659cbb64fbd94fd35cf4f4b46
SSDEEP

768:hfKs2WcMCGDUFbyoodwLKXmep99M5b3gx/q6dFQDGe0GCMSzVv4:hfr2WBDDndwuXZj03gVZ9HA

Score

N/A

Malware Config

Signatures

Files

90200449ae5eb6417dab827544fdd0be9246eecd8bfeb26c3f9727be7dbc70ca
.exe windows x86

2a76574a973124f77a05fde95b99667d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

urlmon

HlinkNavigateString

Sections

.text
Size: 29KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE