cf71e97769fc96836d6cf745bac29a3d71c323c366c83c24a6db5a679992cc41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf71e97769fc96836d6cf745bac29a3d71c323c366c83c24a6db5a679992cc41
Size

817KB
MD5

72e5876ad680e8d66651895f5c3224fb
SHA1

ee0adcb8327907ef025dc2e401eadfb3503b27ea
SHA256

cf71e97769fc96836d6cf745bac29a3d71c323c366c83c24a6db5a679992cc41
SHA512

0acef9fe2f23ec31a9392f0b83f01c1458376ffb482d7909fe3c1c9d582b7f7c5b0311216392882c3edb0203662518270021a239893a88545c8dae758e073dde
SSDEEP

24576:NmVlR46C4THFMuKfQmW9+d2gZfGrSMKML:GR35MuKol942gZfGXj

Score

N/A

Malware Config

Signatures

Files

cf71e97769fc96836d6cf745bac29a3d71c323c366c83c24a6db5a679992cc41
.exe windows x86

0abc12ea04fc9c19717e00d307a1ed1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualProtect
TlsGetValue
TlsSetValue
SetThreadPriority
SetLocaleInfoA
VirtualQuery
FormatMessageA
GetModuleHandleA
lstrlenW
GetModuleFileNameW
GetFullPathNameW
lstrcatA
GetPrivateProfileIntA
ReleaseMutex
SetCurrentDirectoryW
GetCurrentThreadId
WriteConsoleW
DeleteFileW

azroles

AzApplicationCreate
AzApplicationClose
AzAddPropertyItem
AzApplicationDelete

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ