459f50af05c999977a732256f096541a3a431d2e3ec895c928e511b01f3a93ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

459f50af05c999977a732256f096541a3a431d2e3ec895c928e511b01f3a93ed
Size

132KB
MD5

7a16a6b6d76772cd0199be5e4e62c0b9
SHA1

287c7943a0074c3310539b521170373be76ec87f
SHA256

459f50af05c999977a732256f096541a3a431d2e3ec895c928e511b01f3a93ed
SHA512

55388363c54fdb8bb43396efde46112ce1b5a68a611d6c4d987e0edcb98541ba691fef97cf43f6b777eebbde3f779cbfaaf2345ddcf00ac33a3192bbe893db20
SSDEEP

1536:Rr5yiXY5xL13z1TIfD26K7loF4cDTtj5y1cSk3volBLlOGM5BbbQnDDvVmCUWt:RrGxL13ED26cloF48TtgzDvLwngDDt

Score

N/A

Malware Config

Signatures

Files

459f50af05c999977a732256f096541a3a431d2e3ec895c928e511b01f3a93ed
.exe windows x86

5e5900e939f4f2729610370a17a97b4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetTempFileNameA
GetLocaleInfoA
GlobalAlloc
SetThreadLocale
GetPrivateProfileStringA
GetTempPathA
Sleep
IsDebuggerPresent
GetThreadLocale
GetProcAddress
SetFileAttributesA
CopyFileA
GetCommandLineA
QueryPerformanceCounter
SetFilePointer
OutputDebugStringA
VirtualProtect
DeleteFileA
lstrcmpA
VirtualFree

msvcrt

atan2
__p__fmode
__getmainargs
_initterm
_adjust_fdiv
_except_handler3
_exit
_XcptFilter
_controlfp
calloc
__set_app_type
__p___initenv
__p__commode
free

Sections

.text
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ