ca99cc2f5f0170c17a468cb1013b706aab7ff587808845fddbd90c56eedd9495 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca99cc2f5f0170c17a468cb1013b706aab7ff587808845fddbd90c56eedd9495
Size

101KB
MD5

c18f7a6f5da700c07bffe6957416073b
SHA1

338312a11a14d780f0be10d1cddca81cd0563717
SHA256

ca99cc2f5f0170c17a468cb1013b706aab7ff587808845fddbd90c56eedd9495
SHA512

0020ff89540adf8f54e8364d918efb64797fb5228705b909d50f642b7b5be608089575df3b6dabbbb5875a603d33ae8fb66544a2211e18b0ba40a564031e4cbd
SSDEEP

1536:ERVWlunlaBXobOOuEg4GK6SZx5TNNMsHKGXmsRdqm6csgB+DdBtG6rvbb+3E:IvlaBXpElpZr/H8sRdqm6FHzvb+3E

Score

N/A

Malware Config

Signatures

Files

ca99cc2f5f0170c17a468cb1013b706aab7ff587808845fddbd90c56eedd9495
.exe windows x86

ce4299376dd49def0922d751bfae8d64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??2@YAPAXI@Z
fclose
fputc
fgetc
fread
fseek
fopen
_write
free
_exit
_XcptFilter
exit
_open
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_close
time
srand
rand
strncpy
sprintf
_lseek
_read
_acmdln
malloc

kernel32

GetModuleHandleA
GetProcAddress
Sleep
CreateProcessA
WaitForSingleObject
CloseHandle
LoadLibraryA
VirtualAlloc
GetStartupInfoA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ