7f8aef49aebd242421d1a3743b3974a035a8558643292275604ea7527f8c1aed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f8aef49aebd242421d1a3743b3974a035a8558643292275604ea7527f8c1aed
Size

16KB
MD5

18521b3c408ee5bb3525afb4540b7e26
SHA1

6402e1d8d472e2c742a08c80645b3e4ff796e21c
SHA256

7f8aef49aebd242421d1a3743b3974a035a8558643292275604ea7527f8c1aed
SHA512

35567a3b056e2a9fd30df4043c62808dff056535f1ae29df128a5b67cf03c7af82d30dbba4258e456775b63d1e08f8aa98568891c58288de0dbddd82b58525f4
SSDEEP

384:hcHCnJ5RAH4U7ntNL0+9V4zyyRW9eyNAbso5xJo6o:einJ7AHp7t99VERW9eyeb3XJo6o

Score

N/A

Malware Config

Signatures

Files

7f8aef49aebd242421d1a3743b3974a035a8558643292275604ea7527f8c1aed
.exe windows x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE