b849651bb1fb339dec42d4eb983ee0632817de9c8a9e1e4b714ed2992e125060 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b849651bb1fb339dec42d4eb983ee0632817de9c8a9e1e4b714ed2992e125060
Size

309KB
MD5

6bfcd2dcf74ba3c09b6def378e3da55a
SHA1

c9c4f6da390eeaa03fbcfeb044777eec229d99f0
SHA256

b849651bb1fb339dec42d4eb983ee0632817de9c8a9e1e4b714ed2992e125060
SHA512

0bc8d344467880c3d9fc73f8104f31f3a1ab3eb37687c8c008655a6b94e2513430734f1c6ecb51b394fe28a7a17fb3e96c5afb89a89f66bfda0ca8467a9a6971
SSDEEP

6144:y2DzJbO7s63Cf6QBnOHC7KuBSBX5egsneaSRGNPbgddCjj1/Z8PiZoDwaBu:HzFCSnOHa0nepnnnNaCjxh84UwaBu

Score

N/A

Malware Config

Signatures

Files

b849651bb1fb339dec42d4eb983ee0632817de9c8a9e1e4b714ed2992e125060
.exe windows x86

23396ba40bb074eaa5684514f22493cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32First
SetEnvironmentVariableA
GetPrivateProfileIntA
FindResourceW
GetDiskFreeSpaceW
WaitForSingleObject
GetPrivateProfileIntA
lstrcmpA
lstrcpyW
GetLongPathNameA
InterlockedDecrement
GetDiskFreeSpaceW
ExitProcess
GetStringTypeW
WriteFileEx
InterlockedIncrement
GetExitCodeProcess
LoadLibraryA
GetPrivateProfileSectionA
GetACP
GetCurrentDirectoryA
GetModuleHandleW
VirtualAllocEx

apphelp

ApphelpCheckExe
AllowPermLayer
ApphelpCheckIME
SdbCreateMsiTransformFile

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE