6166611f9afc1eb9a3421d8d5200d7e5770fb012607be4879be4aa2b951fcf74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6166611f9afc1eb9a3421d8d5200d7e5770fb012607be4879be4aa2b951fcf74
Size

817KB
MD5

075e429cd59099875b0afee01870f052
SHA1

0c2b86dfe8eeffeacd6ef0391ebd709afb19d720
SHA256

6166611f9afc1eb9a3421d8d5200d7e5770fb012607be4879be4aa2b951fcf74
SHA512

f2063e1b5bb8ad81286e98ded7fbd03fc75e894e8985b83471538fbc5aa5f84624454c703544d38a82f353ad725694188fa6afb6a351de9ad78976bb76d8865c
SSDEEP

12288:JnOnht4BmmO7QGNec+9d7OZYnNbDLiV+bRGeQ1AmixJu5k9:JnOnP2mz7QGN/KOuNvjGz1A7u5k9

Score

N/A

Malware Config

Signatures

Files

6166611f9afc1eb9a3421d8d5200d7e5770fb012607be4879be4aa2b951fcf74
.exe windows x86

d251c2808607685f1cdc3cd8b13dcb33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetPrivateProfileIntA
FormatMessageW
lstrcpynA
DeleteFileW
lstrcpynA
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
VirtualProtectEx
lstrcpynA
lstrcpynA
OpenMutexW
GetFileType
GetModuleHandleA
GetCommandLineW
lstrcatA
GetFileSize
lstrcmpA
lstrcpynA
ReadFile
ReadConsoleA
lstrcpynA
CreateDirectoryW
SetThreadPriority
VirtualFree
GetCurrentThreadId
lstrcpynA
lstrcpynA
GetDiskFreeSpaceW

certmgr

DllGetClassObject
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ