fce535a165d976e26506eea22b570dc84c25f9b55fb90e65cd013ade05c9a05c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fce535a165d976e26506eea22b570dc84c25f9b55fb90e65cd013ade05c9a05c
Size

817KB
MD5

f38a3c1458b4d5b052b063970c1840a7
SHA1

5d902bf50a45e8c2d4284f6f15c41ef73d7a32a7
SHA256

fce535a165d976e26506eea22b570dc84c25f9b55fb90e65cd013ade05c9a05c
SHA512

380b36f847c585b6561afa4428608a9a6b12675290e5ce1a793ecf186830c2dd3ec0de06065b218dc8b80fcb59c5d8167fe3b27d06500a1ca6d36d82b3deb267
SSDEEP

12288:tsiRcctim2rE+kOKK/yTnjdBgNRUD+umOE0zR0LaD1mcdYtUnHHfq:tsVctiTE+nKIOnxSRU9mczR0q/wGfq

Score

N/A

Malware Config

Signatures

Files

fce535a165d976e26506eea22b570dc84c25f9b55fb90e65cd013ade05c9a05c
.exe windows x86

50d4c64a2c3219ec9110fd5a73427c17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcatA
ReadFile
lstrcpynA
GetCommandLineW
GetFileSize
lstrcpynA
GetModuleHandleA
VirtualFree
GetPrivateProfileIntA
ReadConsoleA
CreateDirectoryW
GetDiskFreeSpaceW
lstrcpynA
VirtualProtectEx
lstrcpynA
GetFileType
lstrcpynA
FormatMessageW
SetThreadPriority
GetCurrentThreadId
lstrcpynA
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
lstrcpynA
lstrcmpA
lstrcpynA
DeleteFileW
OpenMutexW

certmgr

DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ