cf12910561f559218558351fa71bdbb653f6a0a1edd4623be15599b0a1d3159d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf12910561f559218558351fa71bdbb653f6a0a1edd4623be15599b0a1d3159d
Size

22KB
MD5

5663c437f621cbad78b18a3f91f1efc0
SHA1

1d9b6d161968314ce3b133883e220570ed35b46e
SHA256

cf12910561f559218558351fa71bdbb653f6a0a1edd4623be15599b0a1d3159d
SHA512

4a134c570bf6177e77c56533fe78228000424534ed963ee0b43d91dedaf5a69536358f6ba9f58d39bf9304379cdb902ff775cbaa8e12ba66f0a244e1993c9295
SSDEEP

384:7lxDWRkl6rYEw9vfGAtr7JI9h2nvRc0cJYz5vd0VCIrHJo8YFGqP5vXWvwWy:DyRY6nw9vfGAtrVW85c0cJudYCIr9YFI

Score

N/A

Malware Config

Signatures

Files

cf12910561f559218558351fa71bdbb653f6a0a1edd4623be15599b0a1d3159d
.exe windows x86

7345f9497130be252852f565608edfb2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetTickCount
GetTempPathA
Sleep
GetCurrentThreadId
ExitProcess
GetProcAddress
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA

user32

PeekMessageA
PostThreadMessageA
wsprintfA

Sections

.text
Size: 1024B - Virtual size: 663B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ