6838372a925ab7b36fc4ec401046a9e672789f18c01e6522ecb7eb4cb0b221b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6838372a925ab7b36fc4ec401046a9e672789f18c01e6522ecb7eb4cb0b221b7
Size

24KB
MD5

5462aa602d1e4b0fca7a06b53ebccbd9
SHA1

af92233258c41c76cd2adf69514f037424654c00
SHA256

6838372a925ab7b36fc4ec401046a9e672789f18c01e6522ecb7eb4cb0b221b7
SHA512

7602e07dd47f4f540af6c4e97c67fa0861d48c889465a5492ef226f3548502e7752ea19034fd3bab6815b0f229b3e3fa66f3a25beeee19a3f7ee6ee8bf600bbc
SSDEEP

384:/YTBWV5qfx1jcPMsy56fB3Pm8Up6Tz1CF:/YtWV5qfxJcUsy56fB3Pm8zT5C

Score

N/A

Malware Config

Signatures

Files

6838372a925ab7b36fc4ec401046a9e672789f18c01e6522ecb7eb4cb0b221b7
.exe windows x86

73ba3482e344c923d4cc9579ad4b1e9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
FreeLibrary
GetModuleFileNameA
GetProcAddress
LoadLibraryA
WinExec
Sleep
GetModuleHandleA
GetStartupInfoA

user32

CreateWindowExA
PostMessageA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
ShowWindow
RegisterClassExA

msvcrt

atol
_controlfp
_except_handler3
__set_app_type
sprintf
??3@YAXPAX@Z
rand
__CxxFrameHandler
srand
__p__fmode
strncpy
fclose
fwrite
fopen
strchr
??2@YAPAXI@Z
time
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE