88d65bfa67db0a9ec12e80af35414f1036d322cfee30e8223af3728fb059b04c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88d65bfa67db0a9ec12e80af35414f1036d322cfee30e8223af3728fb059b04c
Size

817KB
MD5

ec77b37c510f1b488beec85864968b54
SHA1

5a7c17797edb0e05068f81335f5a1ab1e9f45b24
SHA256

88d65bfa67db0a9ec12e80af35414f1036d322cfee30e8223af3728fb059b04c
SHA512

cc826a4b7aaa877fc104bdd6638bb53f328a51f14de0d803b428ee025409ec70e19d164e15a06f482d8890e62904d05686a2303ba2526c0b3db453f3e391fe89
SSDEEP

12288:qrlB7ayZASUYjrgFjBnphxfPTSq1qY9Wk5779wyuEgWTQii/2zl3656BewjItd:qrlB70/Nnb1h1tjuws/2zl3O6ewUtd

Score

N/A

Malware Config

Signatures

Files

88d65bfa67db0a9ec12e80af35414f1036d322cfee30e8223af3728fb059b04c
.exe windows x86

97746a2da2ce1f18936fb5573b73cd07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
lstrlenW
GetFullPathNameW
VirtualQuery
SetCurrentDirectoryW
WriteConsoleW
GetModuleHandleA
GetModuleFileNameW
ReleaseMutex
DeleteFileW
FormatMessageA
TlsSetValue
VirtualProtect
lstrcatA
GetCurrentThreadId
GetCommandLineA
SetLocaleInfoA
GetPrivateProfileIntA
TlsGetValue

azroles

AzApplicationCreate
AzApplicationClose
AzApplicationDelete
AzAddPropertyItem

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ