4fb9a56053f8dcb48d92bbd24f32edd87ee5599e41280fa91141c16e35cee3d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fb9a56053f8dcb48d92bbd24f32edd87ee5599e41280fa91141c16e35cee3d6
Size

1.1MB
MD5

3ddf44ab65c80bf393b632e5ccd4abad
SHA1

d7b79002e68919febc19f501abfed5dc514e16bc
SHA256

4fb9a56053f8dcb48d92bbd24f32edd87ee5599e41280fa91141c16e35cee3d6
SHA512

7f0653badeef846cf3c2511e7de9e81a3c172fbb9b4a9a0e473d6ee010f0bb8dcd4cd2cfd8deb8d800e1ba8947cadb746f95189e89176553ebcc000f5ea4327a
SSDEEP

24576:7VyGy9kPEsc4LvyYFL85wpXqd3Q2S10Rp2:7VWkPF9Lq1aXql+10S

Score

N/A

Malware Config

Signatures

Files

4fb9a56053f8dcb48d92bbd24f32edd87ee5599e41280fa91141c16e35cee3d6
.exe windows x86

c1d4e6fe241fa068d520fbdf6f05e997

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetLastError
GetModuleHandleA
GetCurrentProcess
GetSystemDefaultLCID
GetModuleHandleW
GetUserDefaultLCID
GetSystemDefaultLangID
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
GetUserDefaultLangID
HeapAlloc
GetProcessHeap
LoadLibraryA
GetVersionExA
TlsSetValue
ResetEvent
FindClose
GetOEMCP
MapViewOfFile
WideCharToMultiByte
EnterCriticalSection
GetEnvironmentStrings
HeapFree
FormatMessageW

Sections

.text
Size: 333KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 770B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 784KB - Virtual size: 783KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ