b075f5917b06e49799dc88046683eecc5116bd79d14d91f4c053da7d3b9b215d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b075f5917b06e49799dc88046683eecc5116bd79d14d91f4c053da7d3b9b215d
Size

22KB
MD5

47497213f0a94a11b3bf8a138b52da90
SHA1

a8fe8e555507f3d725be11390bf194ec4548dc0e
SHA256

b075f5917b06e49799dc88046683eecc5116bd79d14d91f4c053da7d3b9b215d
SHA512

3a0f4ebd23e0eab1de5bd0eaea02235fb629171180ed546597d3b6adeae1decfc3fa67d5b2aea31ba77364c9a1d3d34e78e979a53febeffa249f08364ce378bc
SSDEEP

384:N86WnK9NvBJ7X0q4B9A63pCI/PBzWMYYfeWk58sCub2v:N2Yvn7v4zAENnk58sCuSv

Score

N/A

Malware Config

Signatures

Files

b075f5917b06e49799dc88046683eecc5116bd79d14d91f4c053da7d3b9b215d
.exe windows x86

3d047901b1e8984a2747179c637900b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetStartupInfoW
RtlUnwind
DecodePointer
DecodeSystemPointer
EncodePointer
EncodeSystemPointer
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetOEMCP
GetProcessHeap
GetSystemInfo
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
OutputDebugStringW
SetLastError
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ