74661324740322d99bc16cca5720eec4c83624766580c8405f17baf6bb7d1ede | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74661324740322d99bc16cca5720eec4c83624766580c8405f17baf6bb7d1ede
Size

22KB
MD5

6c08005774d52d9e44738c9dd4e12f80
SHA1

e155a67c0dd8ced41bb69cb787d2433ee8dc2735
SHA256

74661324740322d99bc16cca5720eec4c83624766580c8405f17baf6bb7d1ede
SHA512

a102dc2f3d52bbc2fe9a0ea993ffbfb9b99550222aa8061e213d75909f56295c677c40c1ff13063331320ad73fe134faaa88c0f867e7b17528191ab7a28cce6d
SSDEEP

192:2yg8Zn6Wi5Y3P1oynJ0RwZEMG9YwxeNaWBeOK:VC5Yf1oGeTYwxHWBeOK

Score

N/A

Malware Config

Signatures

Files

74661324740322d99bc16cca5720eec4c83624766580c8405f17baf6bb7d1ede
.exe windows x86

c4a2407f5c26628324f031bb68c39a54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateFileA
ReadFile
SetFilePointer
CreateDirectoryA
WinExec
WideCharToMultiByte
SetFileAttributesW
CreateFileW
GetModuleFileNameW
ExpandEnvironmentStringsA
GetTickCount
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
rand
??2@YAPAXI@Z
wcslen
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
strncpy

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ