19df6a0619b51c1811077e5c9663838475fd5ea56ba4336ede96f753eeb79b7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19df6a0619b51c1811077e5c9663838475fd5ea56ba4336ede96f753eeb79b7c
Size

380KB
MD5

c577eecce5ff9a054b645dbcad2a4339
SHA1

4c92b7be9c857a1d687e2779b88df62a42645791
SHA256

19df6a0619b51c1811077e5c9663838475fd5ea56ba4336ede96f753eeb79b7c
SHA512

b021aa0c603610b3a66790113752c71d28d9d8dcfa2135c04477dbf9bba6b09102cfa3ecd07a75b7d02a9146106309a6aa8663613f4f2287cf8ab554130c6f6b
SSDEEP

6144:0etA1jBzHyo8gnPjm7W5/OctoAOPRK7jClPtVz8RsFZxEmhV0aVZKCW9PjLMj7G:0eqNljmS/ROPEf+PLz8q0an5ELw

Score

N/A

Malware Config

Signatures

Files

19df6a0619b51c1811077e5c9663838475fd5ea56ba4336ede96f753eeb79b7c
.exe windows x86

67e22f60b3fa9d45f01e85918497282c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetProcAddress
VirtualAlloc
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeW

user32

SendInput
ShowWindow
SetActiveWindow

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ