d6368bdfee383382a2aff3ba79981904ec778d1d8bd614b805057ccd637fb0b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6368bdfee383382a2aff3ba79981904ec778d1d8bd614b805057ccd637fb0b5
Size

168KB
MD5

04bc80b515e38fb876dcb7730dabaa5a
SHA1

7680103368584bc9ea70d7656e039486e088ce7a
SHA256

d6368bdfee383382a2aff3ba79981904ec778d1d8bd614b805057ccd637fb0b5
SHA512

88821f6ad25b03426025bd899ea2893cd3f3e96c5db3d97c418dfb0e09a57a29f556051b0ea462eb937ce8f41ac2d88a219531d9762af321651adf369ce88b43
SSDEEP

3072:5KEEaR5/hXvI/E0wJJVi2jRLCE7NEhPUkW6LvXxE07zQ:XEmhN0a7CEiVUh6Z

Score

N/A

Malware Config

Signatures

Files

d6368bdfee383382a2aff3ba79981904ec778d1d8bd614b805057ccd637fb0b5
.exe windows x86

6ad6a151c1bbef1909962b1cf62fad77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
CreateMutexA
OpenMutexA
CreateProcessA
GetModuleHandleA
GetStartupInfoA

msvcrt

rand
strcpy
malloc
strlen
memset
srand
time
atol
printf
free
memcpy
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ