faa324dc3e4c9541e42a582028ef02a273504724e3d43431f1392320c4e2320c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faa324dc3e4c9541e42a582028ef02a273504724e3d43431f1392320c4e2320c
Size

157KB
MD5

70dc4b140bd80ecf5322c6deca518440
SHA1

1dc7cd39edb0cefc74c2b048edbd5124f3dfc884
SHA256

faa324dc3e4c9541e42a582028ef02a273504724e3d43431f1392320c4e2320c
SHA512

d497d405fa4a6f91aacc498ecd6fbc02452cf51f4f9fedcae10cfd00f220c71ae9bc7bdc42597a56d503398f42fca6291a8c9cc9120911332c590eb18790410d
SSDEEP

3072:2++TFnoWTTYBB1hHgN1AnquICBETF2/DEqa:VuFyBDhHgPAngWETFyD3a

Score

N/A

Malware Config

Signatures

Files

faa324dc3e4c9541e42a582028ef02a273504724e3d43431f1392320c4e2320c
.exe windows x86

1e981a857730d2d2d49c3cc3486f0953

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVolumeInformationA
GetSystemInfo
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ