79ea83fb8c385fbb4b7abe297a4c3e0dbd4e14c17998a617510e8e9033e54291 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79ea83fb8c385fbb4b7abe297a4c3e0dbd4e14c17998a617510e8e9033e54291
Size

1.1MB
MD5

084d0a45b71b82a5e862782b72402e21
SHA1

8c28e3176fde8971f4958f023c5172b81081da63
SHA256

79ea83fb8c385fbb4b7abe297a4c3e0dbd4e14c17998a617510e8e9033e54291
SHA512

fa62ada1e22a2fe2254fb9bccf69862432f4c8032199bfb09b19970c0f042383bfa249fb732f785dd77beaf34d85244ead1348e22db9d817385d0eac99ea08f4
SSDEEP

12288:ogs+lHtDd0kbtf4AomW8ihUWHqdxu8zcXVrDsoVam1oarWe+b2+7aArhxJcw3yp:jXZPh4Aom9ihUWB8zMrDLVam1pa8+GyI

Score

N/A

Malware Config

Signatures

Files

79ea83fb8c385fbb4b7abe297a4c3e0dbd4e14c17998a617510e8e9033e54291
.exe windows x86

deb1b826773a2c8bae4a674f324664ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
GetSystemDefaultLangID
GetLastError
GetCurrentProcessId
GetCommandLineW
GetSystemDefaultLCID
GetVersion
GetCurrentProcess
GetModuleHandleA
GetTickCount
GetCommandLineA
GetCurrentThreadId
VirtualAlloc
SetLastError
LocalAlloc
GetACP
FindNextFileW
WriteFile
GetSystemInfo
GetStringTypeW
WaitForSingleObject
UnmapViewOfFile
ExitProcess
MapViewOfFile
GetConsoleMode
SetStdHandle
FindFirstFileA
TerminateProcess
FreeEnvironmentStringsA

Sections

.text
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ