853b25b85d8b6bbf4daba2f185a496ecd21fc3ee9befdbadf1e1a8db4879e996 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

853b25b85d8b6bbf4daba2f185a496ecd21fc3ee9befdbadf1e1a8db4879e996
Size

817KB
MD5

1aa40410a02c90a628771cf2921aed7c
SHA1

22fc83478865d875c906fffd97255e818ee1a59b
SHA256

853b25b85d8b6bbf4daba2f185a496ecd21fc3ee9befdbadf1e1a8db4879e996
SHA512

757f0ca7575324ae6b3d63fab27c48f81d76a22876d0fa9054ccdf7a16f91409793ab68f4559a06808b52f6e37579a00ea7e1a6274e4be6cf1debd74fb51116c
SSDEEP

24576:9BoSdw/4iyJD+Kqy7IRV3WdJXbwLmKwU:roSdkEJx7ILWde61U

Score

N/A

Malware Config

Signatures

Files

853b25b85d8b6bbf4daba2f185a496ecd21fc3ee9befdbadf1e1a8db4879e996
.exe windows x86

ba2fc1d9c1d8b6741f93dbc4436c8ec9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
SetLocaleInfoA
SetThreadPriority
ReleaseMutex
lstrlenW
VirtualQuery
WriteConsoleW
TlsSetValue
FormatMessageA
VirtualProtect
SetCurrentDirectoryW
GetFullPathNameW
GetModuleHandleA
TlsGetValue
GetModuleFileNameW
DeleteFileW
GetPrivateProfileIntA
GetCurrentThreadId
lstrcatA

azroles

AzAddPropertyItem
AzApplicationDelete
AzApplicationClose
AzApplicationCreate

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ