b4caa79b49f1fb1e8e2e01c56161a3ada3bffd3101a1e15eeec42717897fa19d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4caa79b49f1fb1e8e2e01c56161a3ada3bffd3101a1e15eeec42717897fa19d
Size

200KB
MD5

6e4d6a5c0ffc7f39b0e13221c56c1974
SHA1

24ef000a30445387c96f18895bf9f544b7656e7b
SHA256

b4caa79b49f1fb1e8e2e01c56161a3ada3bffd3101a1e15eeec42717897fa19d
SHA512

b66057c184a61acc8f80f8e02499df0efc0ea13e1681a7543f514db3786d154cf2a24c62d4872040f7d5228208849443fcc6f89d52ebf2cdb49e48cc53bbc7cb
SSDEEP

3072:GgiCQtFgehesL5bEGsMgA9NFDn1q2ZRg9HQ6nae8m6+/:bfM5bEEgEFxq2ZRg9wI1sa

Score

N/A

Malware Config

Signatures

Files

b4caa79b49f1fb1e8e2e01c56161a3ada3bffd3101a1e15eeec42717897fa19d
.exe windows x86

ec3eb24e2d566823a32ed545d75f52cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
Sleep
CloseHandle
CreateFileA
lstrcatA
GetSystemTime
ReadFile
GetProcAddress
WriteFile
GetSystemDirectoryA
GetTempPathA
CreateProcessA
MoveFileExA
GetLocalTime
lstrlenA
SetFilePointer
GetModuleFileNameA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLastError
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE