f58f8d957fa84c05dd7a17ad2c537f21b4ff66f61356b6baa81d6e6ed3a629ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f58f8d957fa84c05dd7a17ad2c537f21b4ff66f61356b6baa81d6e6ed3a629ba
Size

309KB
MD5

60e15b16fca3526f86738de2e0c977f1
SHA1

bca196c8b484884d01f8fc2375eb188f0b838a99
SHA256

f58f8d957fa84c05dd7a17ad2c537f21b4ff66f61356b6baa81d6e6ed3a629ba
SHA512

94fa15313710c815c7a05794ff218cebb2f6884f54a432c42e02f735312aaf12246a8c32f4b049776b583657fe59565b22c012f1b9242696849ca58bbf2cabf1
SSDEEP

6144:+QfBJ+lC4hfwwFRUeN5/Yf/iNHtUv4urFj19JPL/Qaj2ZrJVzK0HS:P5HMwwFRP5/YfqNLuRjVbQaj2Fef

Score

N/A

Malware Config

Signatures

Files

f58f8d957fa84c05dd7a17ad2c537f21b4ff66f61356b6baa81d6e6ed3a629ba
.exe windows x86

ea4f3ce180baefe9be7a87f19a831977

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GetPrivateProfileIntA
WriteFileEx
ExitProcess
InterlockedIncrement
Heap32First
GetModuleHandleW
GetCurrentDirectoryA
GetLongPathNameA
VirtualAllocEx
GetACP
GetStringTypeW
GetExitCodeProcess
GetPrivateProfileSectionA
SetEnvironmentVariableA
GetDiskFreeSpaceW
lstrcpyW
lstrcmpA
WaitForSingleObject
GetDiskFreeSpaceW
FindResourceW
GetPrivateProfileIntA
LoadLibraryA

apphelp

AllowPermLayer
ApphelpCheckExe
SdbCreateMsiTransformFile
ApphelpCheckIME

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE