4850788062cd07335bfaf9d7ac91087cebea86a3125820511b4baa43f6d48141 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4850788062cd07335bfaf9d7ac91087cebea86a3125820511b4baa43f6d48141
Size

1.6MB
MD5

6d0f3196e91f8ae640791d5bb0d466b7
SHA1

61b81938ddd78fa7f126a1941b5043438b7e09b7
SHA256

4850788062cd07335bfaf9d7ac91087cebea86a3125820511b4baa43f6d48141
SHA512

f6c315f2f20573391611efeb690aa94e1c57bb0adc7f314588c6d5b5942c0ccbcd0c0e8d3293e2bed782f7e7263470e1f70b33affc3fb134e823b7df36434351
SSDEEP

49152:mkf+lrdsO2gH9hPmJeuP222hl7W9ug7SBlVk/o9:Zfird12gDPmJl25hl0ukSBlVk/4

Score

N/A

Malware Config

Signatures

Files

4850788062cd07335bfaf9d7ac91087cebea86a3125820511b4baa43f6d48141
.exe windows x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ