ff8875d0b4b6b965b390997119707682714b30e25683a74b251c1a61b133cbe3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff8875d0b4b6b965b390997119707682714b30e25683a74b251c1a61b133cbe3
Size

137KB
MD5

68d9bf214f220f8b5e8d1cda2f7add50
SHA1

2d31b0fda0912d321b8148f6af377143b135064a
SHA256

ff8875d0b4b6b965b390997119707682714b30e25683a74b251c1a61b133cbe3
SHA512

0b7f9decb7789dc534609d0d5534d1ef6c63261aefad0a88286c8c1e3c24a2d961d736e8075da5696d459fb36b1b756b65e057150f6ef6979321338cf45bb637
SSDEEP

1536:fAJZzo0iH/507iok40MXGsvv0EqKCRdVxBfEJQvc3Zi+J:IJ3iH2mok40MXGSqKodVzVcJhJ

Score

N/A

Malware Config

Signatures

Files

ff8875d0b4b6b965b390997119707682714b30e25683a74b251c1a61b133cbe3
.exe windows x86

3e6abbab9d6a5594bd8461696008374d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleFileNameA
GetTickCount
LoadLibraryA
GetSystemInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CloseHandle

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ