c1a00b83e38782e5d1eb070c24387060b55d70570ee31d3354987c885dd6698c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1a00b83e38782e5d1eb070c24387060b55d70570ee31d3354987c885dd6698c
Size

192KB
MD5

dea1bb17cf3924b859ca86493936558e
SHA1

efa3c4788f736f1596b6f6789c895a539fc2def3
SHA256

c1a00b83e38782e5d1eb070c24387060b55d70570ee31d3354987c885dd6698c
SHA512

b60d8acc3d101190c655900460b775cf230580ee671e741c951a23e4f9b07e7d85e40d94e4a7613a3109873f6e68e70d5cfcb5beb2e9bf775a5bc49e6821acbb
SSDEEP

3072:2OVSDUDbJxXn/1MpEvoH4A/q/pQMFyT7YVBW28H1tb4RD135dS40BaSgH8IhXe6T:2OjDTv1MKvKKyT7IeGhGa3H8GXt8hcx6

Score

N/A

Malware Config

Signatures

Files

c1a00b83e38782e5d1eb070c24387060b55d70570ee31d3354987c885dd6698c
.exe windows x86

0d406628ef65cd8bd136d3d6385888aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
ExitProcess
IsBadHugeReadPtr
GetModuleHandleA
GetOEMCP
GetCommandLineA
GetACP
LoadLibraryA
IsBadReadPtr
LoadLibraryExA
lstrlenW
ExitThread
GetProcAddress
VirtualAlloc
GetCommandLineW

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ