542e06e50744cd76f2ab2b9a5ea522948506eeae6ba2f05405f238851f2c45a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

542e06e50744cd76f2ab2b9a5ea522948506eeae6ba2f05405f238851f2c45a2
Size

818KB
MD5

550f50858e5019745c641140aa120af9
SHA1

8c947b36eec107b9958a83e36d01d9d234bc1814
SHA256

542e06e50744cd76f2ab2b9a5ea522948506eeae6ba2f05405f238851f2c45a2
SHA512

650e0d34129e2f7179f277f58b413880352f503e5e3399856a0764b0b2d49deeb641fcf5abef01df31e7a4ed7078b9159f9a53c649c5a25fa609b8b52ade228e
SSDEEP

12288:J/75mEP+2iU2SOhp4xvrdFD4yJ24rsLj9550PhSO/JMYUpthvJ0/bkn2:vpxlxjvD4yJ24rsP6SOMdOI2

Score

N/A

Malware Config

Signatures

Files

542e06e50744cd76f2ab2b9a5ea522948506eeae6ba2f05405f238851f2c45a2
.exe windows x86

2eae0d1e6d6f16f5acc5fd2dcaf62798

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
GetModuleFileNameW
SetLocaleInfoA
DeleteFileW
SetThreadPriority
SetCurrentDirectoryW
TlsGetValue
GetCurrentThreadId
GetFullPathNameW
GetModuleHandleA
ReleaseMutex
GetCommandLineA
GetPrivateProfileIntA
TlsSetValue
FormatMessageA
VirtualQuery
WriteConsoleW
lstrcatA
VirtualProtect

azroles

AzApplicationDelete
AzApplicationClose
AzAddPropertyItem
AzApplicationCreate

Sections

.text
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ