4fefaaf4baabd7f15d8814c49629bdcebea4ef2b211450bcd92efef760bccc55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fefaaf4baabd7f15d8814c49629bdcebea4ef2b211450bcd92efef760bccc55
Size

817KB
MD5

c7f21163ee578a50251d5c13700db045
SHA1

a9d2fbe8bbc527597fdffbe955cc7b473982c7b6
SHA256

4fefaaf4baabd7f15d8814c49629bdcebea4ef2b211450bcd92efef760bccc55
SHA512

b949033227af9eb9f96e49a238f9b6a218c7342d5f8df656a783bc6733c322305cd3169e4b17847a23212d443c1bb51ac9ffeaf8be72e365e082eb3332777b13
SSDEEP

24576:+q0upRwF9Yn2aZ++YPMGfVVleSYr224OsHfj3JJ45+pq:I59Y241YPMGfVVlgr+/zJJ45+

Score

N/A

Malware Config

Signatures

Files

4fefaaf4baabd7f15d8814c49629bdcebea4ef2b211450bcd92efef760bccc55
.exe windows x86

cee002c3865b7154449184e6e0068fea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpynA
SetThreadPriority
GetCurrentDirectoryA
DeleteFileW
GetFileType
OpenMutexW
GetPrivateProfileIntA
lstrcpynA
lstrcmpA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
ReadFile
GetCurrentThreadId
VirtualFree
CreateDirectoryW
FormatMessageW
GetCommandLineW
GetFileSize
VirtualProtectEx
lstrcpynA
GetModuleHandleA
lstrcatA
lstrcpynA
ReadConsoleA
GetDiskFreeSpaceW

certmgr

DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ