42b4cda3014339ba9be892f06e717228a46dac61b10f0ced7a72c75d68a983fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42b4cda3014339ba9be892f06e717228a46dac61b10f0ced7a72c75d68a983fa
Size

1.1MB
MD5

3ee3d51418ae7f1d581de28a202aec55
SHA1

9f81f0e95cbe140b52f54b11211b48b96e515792
SHA256

42b4cda3014339ba9be892f06e717228a46dac61b10f0ced7a72c75d68a983fa
SHA512

16a48e1c249b31d11d2076007b78929ce83c66071bb44ab1feabd3f017c6a846dfac2562bd227b8aa0ab98ae347fb6212f2480d414024d0d58f5277107cf2dd4
SSDEEP

24576:q+9tWbM4LoSEzCgjV1HPbNCBtegaFGFYFyCJJa4X:qlbM2ZmVZPbILUYFYFyCJJzX

Score

N/A

Malware Config

Signatures

Files

42b4cda3014339ba9be892f06e717228a46dac61b10f0ced7a72c75d68a983fa
.exe windows x86

998383a0d3eee350ddb8b84d1cee40d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
GetUserDefaultLCID
GetModuleHandleA
GetCommandLineW
GetCurrentProcess
GetTickCount
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetCurrentThreadId
GetCommandLineA
HeapAlloc
GetProcessHeap
SetLastError
GetStringTypeW
Sleep
IsDebuggerPresent
WriteFile
SetUnhandledExceptionFilter
GetOEMCP
GetFileAttributesA
FindClose
GetModuleFileNameW
UnmapViewOfFile
GetCPInfo
EnterCriticalSection
CreateProcessA
InterlockedDecrement
FreeLibrary
WideCharToMultiByte

Sections

.text
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ