1ab3c4e868eb6f67006f13bf28e79c079ea3a9cf10df7d2ce445c477b14cc8f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ab3c4e868eb6f67006f13bf28e79c079ea3a9cf10df7d2ce445c477b14cc8f6
Size

179KB
MD5

645feb9d5aac05ef14a7f91b666cf640
SHA1

12fe91af1bfdd0baaea9bf1ae0f8800cedc458b1
SHA256

1ab3c4e868eb6f67006f13bf28e79c079ea3a9cf10df7d2ce445c477b14cc8f6
SHA512

c3aa1903a4fc9f81e88a32d8e220f3f86e6710977b992e3e8d97553b56ae9281ac5117887abc52524c533b5a6105adbcc94ead9920e940a2429162167b3755e9
SSDEEP

3072:+6YS+ZC2fTzzs2cdfZhEv8FffWmMS6O5Zw9/cul+Y+c3ivN0WEs1tOfIzUyI2jWm:+l3wyEJOmnZwlZ+cyvNHEs1tOwPWP

Score

N/A

Malware Config

Signatures

Files

1ab3c4e868eb6f67006f13bf28e79c079ea3a9cf10df7d2ce445c477b14cc8f6
.exe windows x86

7f65ac8571811aadbc9d4f71d2d112f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
GetProcAddress
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
LoadLibraryA
LocalReAlloc
MultiByteToWideChar
GetCurrentProcess
SleepEx
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
GetCurrentConsoleFont
GetCommandLineA
FreeLibrary
ExitProcess
SetThreadAffinityMask
CreatePipe

gdi32

ModifyWorldTransform
GetViewportExtEx
CombineTransform
Arc
SetMapMode

Sections

.text
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ