1c64ed9f44af37a644974c7027cf04a1ac2b065facfef5e71c4ee2c5cb3a3c99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c64ed9f44af37a644974c7027cf04a1ac2b065facfef5e71c4ee2c5cb3a3c99
Size

24KB
MD5

61bc975d4ff1c3875e28f8df0c8f39c0
SHA1

81d03b1020e7bd834458f62032c512acf8098001
SHA256

1c64ed9f44af37a644974c7027cf04a1ac2b065facfef5e71c4ee2c5cb3a3c99
SHA512

2eb73fa102e5373338806f84ad874b6cfce922771bcc8d01f40b5115c6c80cd6ccca81e142cae55cf5f9261f4a1a87fc9491a09bfe547b3048e4e507159c2f0c
SSDEEP

384:XnbD00uK7AWe8EDEWxrNFRW7Lps2C7ONH5T5sw/y5fhCW88eFCW1JuUCSF4W/8e/:Xnc0uK5IrhFohs2C7OoMy5fhhoR4b7

Score

N/A

Malware Config

Signatures

Files

1c64ed9f44af37a644974c7027cf04a1ac2b065facfef5e71c4ee2c5cb3a3c99
.exe windows x86

18a74f192a19b9f7afead5d1374a31a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenA
WinExec
lstrcatA
GetSystemDirectoryA
lstrcpynA
CreateProcessA
WriteFile
OutputDebugStringW
HeapAlloc
GetProcessHeap
Sleep
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
CreateFileA
CloseHandle
ExitProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ