a76a79b5f67bb41c9a6655c2ea2e364228aff461b9c596846e48498aa4f255c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a76a79b5f67bb41c9a6655c2ea2e364228aff461b9c596846e48498aa4f255c7
Size

322KB
MD5

67300ea444b07a9d738f57061847ff77
SHA1

d6cbfa1eede2964eaa095500f98e3ad5fe853287
SHA256

a76a79b5f67bb41c9a6655c2ea2e364228aff461b9c596846e48498aa4f255c7
SHA512

8dde79520059f177538c50a91b2cfc69c8f81ebc873f806e39323eccd46f8052b4cfe18114de1d2aeb2146567ba2ad8936d8f6e7be58abda727c0466a32589fa
SSDEEP

6144:nfdXClEtHWZEXw+YnNbx/Vie7+OIyijhe0dWo7yQjsYzc8hkNh7OwZ3:nkbZE0TiAILhe0d93jsy72vZ3

Score

N/A

Malware Config

Signatures

Files

a76a79b5f67bb41c9a6655c2ea2e364228aff461b9c596846e48498aa4f255c7
.exe windows x86

84f6aa193b3334d42a49b37edeb8ef57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
Sleep
IsBadReadPtr
ExitProcess
InterlockedDecrement
GetWindowsDirectoryA
ReadFile
GetModuleHandleA
GetStringTypeA
WideCharToMultiByte
GetStdHandle
SetFilePointer
GetLastError
GetFullPathNameA
GetCurrentThreadId
GetCurrentProcessId
GetCommandLineA
GetCurrentThread
GetTickCount
GetVersion
VirtualAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ