7850b707269910e0b6f1d2c47e59da27cc5a6d0ff5015a93220e93ea97f0d48a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7850b707269910e0b6f1d2c47e59da27cc5a6d0ff5015a93220e93ea97f0d48a
Size

27KB
MD5

14f983211a56ca9a6a23d5d7bdcc60b0
SHA1

39054ba42662c899dfde2c68a6f616a1d2340137
SHA256

7850b707269910e0b6f1d2c47e59da27cc5a6d0ff5015a93220e93ea97f0d48a
SHA512

0e134a9800009fda94c322ad3f09f15cb3476dac59c3f40d24e71aa4a1b7c8aed233bfb1f6d9535da5c3ce14b4a552a17532023e8de958651355eb91afb32a6b
SSDEEP

768:J9lO2jfcCJ5WqcSrLIEiXIs7+j7KNz/29:J9lOsJUPSrMs3HOz

Score

N/A

Malware Config

Signatures

Files

7850b707269910e0b6f1d2c47e59da27cc5a6d0ff5015a93220e93ea97f0d48a
.exe windows x86

e4fe6bae823ade604a2e315911afef7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

SizeofResource
SetCurrentDirectoryA
CloseHandle
CreateFileA
CreateFileMappingA
CreateProcessA
DeleteFileA
ExitProcess
ExpandEnvironmentStringsA
FindResourceA
GetCommandLineA
GetFileSize
LoadResource
MapViewOfFile
ReadFile
ReadProcessMemory
ResumeThread
RtlMoveMemory
lstrlenA
Sleep
TerminateProcess
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtectEx
WinExec
WriteProcessMemory
lstrcatA
FindClose
FindFirstFileA
FlushFileBuffers
WriteFile
GetModuleFileNameA
GetModuleHandleA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 974B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ