7271990e69f38f78c0843c743b819d20cff55e315eeee7496a7f822e4d6bfeb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7271990e69f38f78c0843c743b819d20cff55e315eeee7496a7f822e4d6bfeb8
Size

816KB
MD5

3e5b3566cf1eff6cbd06d3747c5c5e87
SHA1

1b133f50cf1fcdbc3fb91ccb7a15de386d75935e
SHA256

7271990e69f38f78c0843c743b819d20cff55e315eeee7496a7f822e4d6bfeb8
SHA512

1062ef5aa2375eb5e814410b0b33c53749943b4bc216ed0aac5bcb4a274eb2f7ebe892ca5ddfd4633e2bea175aa4eec3acff8e8d2b4f44adc23df878a0500f8f
SSDEEP

24576:tG19/0QTShqEuA3/kG2e9zR2vTt0JANTJQ4+dbsao:w19/5eVuI/qazR2c6D+dYa

Score

N/A

Malware Config

Signatures

Files

7271990e69f38f78c0843c743b819d20cff55e315eeee7496a7f822e4d6bfeb8
.exe windows x86

943497cda06a72d367042f51bae263fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrlenA
GetCommandLineA
GetFileSize
VirtualProtect
GetModuleHandleA
lstrcmpA
SetThreadPriority
lstrlenA
DeleteFileW
WriteConsoleW
lstrlenA
GetCurrentDirectoryA
ReadFile
lstrcatA
lstrlenA
lstrlenA
GetDiskFreeSpaceW
CreateDirectoryW
lstrlenA
lstrlenA
GetPrivateProfileIntA
lstrlenA
FormatMessageW
lstrlenA
OpenMutexA
GetCurrentThreadId
VirtualFree
TlsGetValue
lstrlenA

certcli

CAEnumFirstCA
CAEnumNextCA
CADeleteCA
CADeleteCertType

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE