678a787b592c3eb72cca7748f130201e5f46668664a331b9b50a6b1be48ac9e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

678a787b592c3eb72cca7748f130201e5f46668664a331b9b50a6b1be48ac9e2
Size

71KB
MD5

00c03c61ead4bcb1f4deae12dc058d86
SHA1

3121a922e8c5ce2dc6be3d7fe05e8f19b2e58ac5
SHA256

678a787b592c3eb72cca7748f130201e5f46668664a331b9b50a6b1be48ac9e2
SHA512

95a5710cc54d359b0219e7419a33c3cd994976f0149989f101f86392f7500d46133272606b52afc895694734dbb6fd2e2c85d4babfe5d850aa456773518a32cb
SSDEEP

1536:nfnYNcJEaCJVKxy9Rm7Sd0OQaLl++h1CRQcwPlb8AG2a+:nfnYaiatRerL7oR2r

Score

N/A

Malware Config

Signatures

Files

678a787b592c3eb72cca7748f130201e5f46668664a331b9b50a6b1be48ac9e2
.exe windows x86

a1f3c85938d839f223b9d794fc14cbfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
WriteFile
lstrcatA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE