1b3a445a5ba7117faf78e882fad82ca418d7a7c5e2163cd529b2fa656b9364e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b3a445a5ba7117faf78e882fad82ca418d7a7c5e2163cd529b2fa656b9364e6
Size

8KB
MD5

6fef1fc2242a64145c370333d6b4dc50
SHA1

af64b40dbb70bae6ffb785d6c50db82c1d341d7b
SHA256

1b3a445a5ba7117faf78e882fad82ca418d7a7c5e2163cd529b2fa656b9364e6
SHA512

f28c46a805b2f550dd7e8024ba814b24fe4df555cfc904339e1620b7f110ec354c99ad1ee0416448de4d0066a0e10ae367ea35c2c2c1dc217027ee61b2b62305
SSDEEP

96:mv30H0GV2/wUqGhjqyV7nS62sQC4o4fOYyTSzm9izZp43Z9NKzF:mf0H0G6wUqG9qyV7SM4o4feeEEZpaH2F

Score

N/A

Malware Config

Signatures

Files

1b3a445a5ba7117faf78e882fad82ca418d7a7c5e2163cd529b2fa656b9364e6
.exe windows x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ