87c518f17eec70a0229b2e0062ce639c2bbe3d8556e06970e75148e0b1d31889 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87c518f17eec70a0229b2e0062ce639c2bbe3d8556e06970e75148e0b1d31889
Size

30KB
MD5

c69f8ce3975876f5e4b47fe71ff26a2a
SHA1

85c3ada5b0b61dbea09ee15a31198b43e2a63096
SHA256

87c518f17eec70a0229b2e0062ce639c2bbe3d8556e06970e75148e0b1d31889
SHA512

04eb7d37fbcf2949c918e7846a8acd62f0630db61c9f37470d2d0e7556b3a64c3965706b87175a1307b4c9870d970cf21934cff879763efb4432204d34b5a7d0
SSDEEP

384:magpYXIpTYw4tOKYUArGLfF4MsuQipnRLkP0BfSZsXJ1wTOl1idmY14LuvVNueND:BR7P9xi4delQODxnEtw

Score

N/A

Malware Config

Signatures

Files

87c518f17eec70a0229b2e0062ce639c2bbe3d8556e06970e75148e0b1d31889
.exe windows x86

6c9b9194f2c78c868150d1469324d871

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpynA
VirtualProtectEx
GetFileSize
FormatMessageW
lstrcpynA
lstrcpynA
CreateDirectoryW
SetThreadPriority
lstrcpynA
lstrcpynA
GetModuleHandleA
lstrcpynA
OpenMutexW
VirtualFree
lstrcpynA
lstrcpynA
ReadFile
ReadConsoleA
DeleteFileW
lstrcmpA
GetFileType
lstrcatA
GetCurrentThreadId
GetDiskFreeSpaceW
lstrcpynA
GetCommandLineW
GetPrivateProfileIntA
GetCurrentDirectoryA
lstrcpynA

certmgr

DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ