04993f31dab9ed0f05ac52c2785c55c47d0cd4efacf9220ee0d64937d0b014ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04993f31dab9ed0f05ac52c2785c55c47d0cd4efacf9220ee0d64937d0b014ee
Size

817KB
MD5

05a6cbb8580c75fe3518f8b1c8e5c857
SHA1

a0d91b3d379957c75cee91b7b791afbeeb694b6b
SHA256

04993f31dab9ed0f05ac52c2785c55c47d0cd4efacf9220ee0d64937d0b014ee
SHA512

5836b1365e61d94ced9c388578ef36be949d86aa8a0acf1f5603644a06549d1016fcb0857315b512693b72f2dedbd204551fb042de79998e33ac1ea3780783f0
SSDEEP

24576:cp1Ujf2O9P395ZY8NtthqifF89R6Mc63Tjr:iUjf9D5HeifFQoQTj

Score

N/A

Malware Config

Signatures

Files

04993f31dab9ed0f05ac52c2785c55c47d0cd4efacf9220ee0d64937d0b014ee
.exe windows x86

61a81fb0447369b0746ca8f1a45d7616

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentThreadId
lstrcpynA
lstrcpynA
ReadConsoleA
CreateDirectoryW
GetFileType
FormatMessageW
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
lstrcpynA
VirtualFree
GetCommandLineW
SetThreadPriority
lstrcmpA
GetDiskFreeSpaceW
lstrcatA
lstrcpynA
OpenMutexW
lstrcpynA
lstrcpynA
VirtualProtectEx
ReadFile
lstrcpynA
GetPrivateProfileIntA
GetModuleHandleA
GetFileSize
lstrcpynA
DeleteFileW

certcli

CAFindByCertType
CADeleteCertType
CAEnumNextCA
CAEnumFirstCA

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ