c970356993f87593cb623c85d5693744fb3b848a6a35afbfc824b2d51414865e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c970356993f87593cb623c85d5693744fb3b848a6a35afbfc824b2d51414865e
Size

92KB
MD5

5a5c6317e8d932e70ba41f0bfa045480
SHA1

52f6fe6d8675877a6d66ce6ac858859549145ef6
SHA256

c970356993f87593cb623c85d5693744fb3b848a6a35afbfc824b2d51414865e
SHA512

860b278ea65a907f2062c9a6e105122599b9aa32a43a5533b570f60a413b2d0743f7b332a9870d34253ebc81e8a23f6f8ea4c1a2a4cfc973330f283002c1e2f8
SSDEEP

768:l6tsfyQBVFolIH7Ll3lImg5FOfLxLaZu82+CKFfco:l6thaoyPl3mmfFaE6Cu1

Score

N/A

Malware Config

Signatures

Files

c970356993f87593cb623c85d5693744fb3b848a6a35afbfc824b2d51414865e
.exe windows x86

705cbe71b06353bac3360f8e798fc146

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
FindFirstFileA
LoadLibraryExA
LoadLibraryA
CreateProcessA
WinExec
_lopen
CopyFileA
MoveFileExA
MoveFileA
OpenFile
CreateFileA
GetEnvironmentStringsW
SetHandleCount
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
GetProcAddress
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
FindNextFileA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
WriteFile
LCMapStringA
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

FindExecutableA
ShellExecuteA
ShellExecuteExA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE