d960fb2158902cff39ea524b86e62e1d2fe446cdbe533a76f94c7843a46f70f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d960fb2158902cff39ea524b86e62e1d2fe446cdbe533a76f94c7843a46f70f3
Size

45KB
MD5

6f23bfc8d0c4861e1d3d610c79130bf0
SHA1

aa842229c8b732198fc36885791887bb500e802d
SHA256

d960fb2158902cff39ea524b86e62e1d2fe446cdbe533a76f94c7843a46f70f3
SHA512

6b02fa7bac8666689331723ae69d9364f29d1e8b0f3a9a5fe3d20c76244f1f79890ce77faf3b7e1e2ff8eef9d4a8ac1833317a7300fdc515857b5adabc8bc44c
SSDEEP

768:WwfnuKCxury0qTv9lzRvYGpokLfD2it2Wli50S79ANwK+m3C0b51:WEuKC2y08ykH2iYW8500ANwK+m3C0

Score

N/A

Malware Config

Signatures

Files

d960fb2158902cff39ea524b86e62e1d2fe446cdbe533a76f94c7843a46f70f3
.exe windows x86

c011f355c19fc96833f4356f4d7406f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
SizeofResource
FindResourceA
CreateProcessA
lstrlenA
CreateRemoteThread
GetProcAddress
GetModuleHandleA
CreateFileA
VirtualAllocEx
GetLastError
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
LockResource
WriteFile
CopyFileA
CloseHandle
GetModuleFileNameA
GetSystemDirectoryA
lstrcatA
WriteProcessMemory

user32

MessageBoxA

advapi32

RegCloseKey
AdjustTokenPrivileges
RegCreateKeyA
RegSetValueA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA

msvcrt

strcat
strlen
printf
_strnicmp
memset
fprintf
_iob

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ