fa9e4ccd36ce2caf913df142278bddfb5e5760de876d2a57a81f673cd798fd94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa9e4ccd36ce2caf913df142278bddfb5e5760de876d2a57a81f673cd798fd94
Size

818KB
MD5

b733c6f3da1e4cdddef962cd25d565fd
SHA1

928eb51e263b698f0b9dcf95c48022a6b852404a
SHA256

fa9e4ccd36ce2caf913df142278bddfb5e5760de876d2a57a81f673cd798fd94
SHA512

c3a2c5477da70e653793304f768d464394babab645b04abfab2e6a17011d195b8037e19adde2287389cbf43cfbb287c277b94595f31cdf2527bc673ad4de066e
SSDEEP

24576:X+vD0eetJsu9VpTIZcAvIVhs9WRNz5Bek1igd/Tzf:ur0eIKgVpo0zkWpBekvb

Score

N/A

Malware Config

Signatures

Files

fa9e4ccd36ce2caf913df142278bddfb5e5760de876d2a57a81f673cd798fd94
.exe windows x86

ed0803754946f826e82e7e1c0ef67d24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
GetCurrentThreadId
DeleteFileW
WriteConsoleW
GetModuleHandleA
lstrlenW
VirtualQuery
TlsGetValue
FormatMessageA
GetFullPathNameW
ReleaseMutex
TlsSetValue
SetCurrentDirectoryW
GetModuleFileNameW
SetLocaleInfoA
SetThreadPriority
lstrcatA
GetCommandLineA
VirtualProtect

azroles

AzApplicationCreate
AzAddPropertyItem
AzApplicationDelete
AzApplicationClose

Sections

.text
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ