dcb5b01a63b9624e1ab015858224d6d504ec48cb59dd4832388ebe84a6a313a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcb5b01a63b9624e1ab015858224d6d504ec48cb59dd4832388ebe84a6a313a9
Size

16KB
MD5

1521ea7302a2218c7c5fa9bc5181e4a2
SHA1

af6890fff1c885100e8266a0048f72515849cae5
SHA256

dcb5b01a63b9624e1ab015858224d6d504ec48cb59dd4832388ebe84a6a313a9
SHA512

bbad3c33e468c6f3bc57fcccd6f5400d6c5eb23baa8fc6be45ff173e1ced7a13c1e1912a6b92432cb876a30e00470c523ddae0a7306847c79170eecfbe365f5e
SSDEEP

192:5RXrvuFdPBqfadL4xWoQx0gq5plnNt/nduvoR/romQp31iK7T5F/EC7SI0qOvvvo:/qPBq430zhNlnd2WQb7/0Iy3+pys

Score

N/A

Malware Config

Signatures

Files

dcb5b01a63b9624e1ab015858224d6d504ec48cb59dd4832388ebe84a6a313a9
.exe windows x86

17e1240dca697ef23b78b63f5c01523d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetWindowsDirectoryA
CreateFileA
GetProcessHeap
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ