2af649f40203de9a49d63b4f52bcd02f852b4d7156c4b9879404f65a557ed17b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2af649f40203de9a49d63b4f52bcd02f852b4d7156c4b9879404f65a557ed17b
Size

396KB
MD5

ff5e71835e8a6adb9d8746f7017b3ecc
SHA1

3f2fbb4627afcbf022daf8eeea2e7d916070f3e6
SHA256

2af649f40203de9a49d63b4f52bcd02f852b4d7156c4b9879404f65a557ed17b
SHA512

595be3bcd5a07c8f0f858b3d4557c6db93fdc5a54b5a505915dd1469b487be932eb9b352632bdc0a902e1848d96002966ec824843f42eecb1300cf901ead4ce7
SSDEEP

6144:eNXodrH+sVIPNYlwyn/zewBIM96+2yymeRm/uzdKJY03FPNFWmIzetw0B8:eNYdremurTyyFtzdKJY03Mtz70

Score

N/A

Malware Config

Signatures

Files

2af649f40203de9a49d63b4f52bcd02f852b4d7156c4b9879404f65a557ed17b
.exe windows x86

dcaef5432636638b6868cba70babebcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriorityBoost
GetProcAddress
Sleep
GetModuleHandleA
InterlockedExchange
OpenEventA
GetStringTypeA
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeW

user32

LoadIconA
EnableWindow

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 391KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 336KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ