d4f8ced2e4746093ab3ce785bbc8d96ee245b5c61859eed3045d479f1e5d2e52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4f8ced2e4746093ab3ce785bbc8d96ee245b5c61859eed3045d479f1e5d2e52
Size

302KB
MD5

1d82cd38ead20277a6a2fb420566cd20
SHA1

c94963333e8eb9796ef891f37a7953d4354cf33b
SHA256

d4f8ced2e4746093ab3ce785bbc8d96ee245b5c61859eed3045d479f1e5d2e52
SHA512

84b78e9646d6b9af729da71f43f7d94fc1dfd8c3714cc07876be4e08a41e861948cee693be7553dab8334fd1d944d4161a506f59e73a6ea538b540d631136a56
SSDEEP

6144:TvTl4VCeIXQcMp1dJGjHYgQ6Uw/HbLpa5Hpa/S0QSMkWFeHKI:Th4Igj50E96UeHCHpqYvMqI

Score

N/A

Malware Config

Signatures

Files

d4f8ced2e4746093ab3ce785bbc8d96ee245b5c61859eed3045d479f1e5d2e52
.exe windows x86

8a14ec1409b34ca504ffeeaba7140a9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
GetPrivateProfileIntW
CreateEventA
GetFullPathNameA
CloseHandle
lstrcmpiW
GetEnvironmentVariableA
OpenMutexA
GetFileAttributesA
LoadLibraryExW
CloseHandle
GetPrivateProfileIntW
GetModuleHandleA
lstrcmpW
GetDiskFreeSpaceA
GetPrivateProfileSectionW
GetDiskFreeSpaceA
CreateDirectoryW
HeapCreate
InterlockedExchange
GetExitCodeThread
SetFilePointer
CloseHandle

certmgr

DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 295KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE