dbd53f461c1e255596811fda0d31ddc6f0768c2ca1d04ac2ef7ab14e2e1da257 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbd53f461c1e255596811fda0d31ddc6f0768c2ca1d04ac2ef7ab14e2e1da257
Size

45KB
MD5

debbe68ec6ac1246aca75f79f3b52001
SHA1

db59de9952a656f0ecba65a2213803d735c5cd00
SHA256

dbd53f461c1e255596811fda0d31ddc6f0768c2ca1d04ac2ef7ab14e2e1da257
SHA512

c29ce484538fb5cbc879cde2ffa396f9701f5d87b59f9f8b7fc4b263dcc4e218739bdaeb5f0e126fe4e3d5861032a6a6f26d668b0aebc99b535ee6915494449c
SSDEEP

768:WwfnuKCgury0qTx9lzRvYGpokLfD2it2Wli50S79ANwK+m3C0b51:WEuKCVy0SykH2iYW8500ANwK+m3C0

Score

N/A

Malware Config

Signatures

Files

dbd53f461c1e255596811fda0d31ddc6f0768c2ca1d04ac2ef7ab14e2e1da257
.exe windows x86

c011f355c19fc96833f4356f4d7406f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
SizeofResource
FindResourceA
CreateProcessA
lstrlenA
CreateRemoteThread
GetProcAddress
GetModuleHandleA
CreateFileA
VirtualAllocEx
GetLastError
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
LockResource
WriteFile
CopyFileA
CloseHandle
GetModuleFileNameA
GetSystemDirectoryA
lstrcatA
WriteProcessMemory

user32

MessageBoxA

advapi32

RegCloseKey
AdjustTokenPrivileges
RegCreateKeyA
RegSetValueA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA

msvcrt

strcat
strlen
printf
_strnicmp
memset
fprintf
_iob

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ