2fea1a1da4352b4d7bf098904dc527d060b03c88a45cf1219a595987d390e4a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fea1a1da4352b4d7bf098904dc527d060b03c88a45cf1219a595987d390e4a4
Size

1.1MB
MD5

3f063437dc66a4492d2255450162e08d
SHA1

e4797afac100e7e8432ba3b825cf6d3f83060b50
SHA256

2fea1a1da4352b4d7bf098904dc527d060b03c88a45cf1219a595987d390e4a4
SHA512

9e42edafc695b142a56dbf54ad5bf0d766c9f65091d5f9916a466376652351129a0ada32be63de65cf003d28c273856b443d0b6e4deba6afb58f9ba2122f4d23
SSDEEP

24576:cvWemcHS6h9gJLn+bg2AAmHngprHQ5BxTMC:ogcHbtWHgprQLpMC

Score

N/A

Malware Config

Signatures

Files

2fea1a1da4352b4d7bf098904dc527d060b03c88a45cf1219a595987d390e4a4
.exe windows x86

93cd99753d7e990639202b516f015590

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetCurrentThread
GetVersion
GetCurrentProcessId
GetSystemDefaultLangID
GetUserDefaultLangID
GetSystemDefaultLCID
GetCurrentProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetUserDefaultLCID
HeapAlloc
GetProcessHeap
InterlockedIncrement
Sleep
GetStringTypeW
HeapReAlloc
GetProcAddress
FindFirstFileW
FreeEnvironmentStringsW
IsDebuggerPresent
WriteFile
InterlockedExchange
GetCurrentThreadId
SetEnvironmentVariableA
GetModuleFileNameW
LoadLibraryA
SetHandleCount
HeapDestroy
TlsGetValue

Sections

.text
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 902B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 784KB - Virtual size: 783KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ