c918f9ee724dce77c8370d2ced80b6a6fe75945b417e61f084a1694c2c49d145 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c918f9ee724dce77c8370d2ced80b6a6fe75945b417e61f084a1694c2c49d145
Size

160KB
MD5

129d4aab75cc5a3ba734d2711d9f072c
SHA1

0aea321116dc6fe629438db8ca54b8528aa86a50
SHA256

c918f9ee724dce77c8370d2ced80b6a6fe75945b417e61f084a1694c2c49d145
SHA512

7eb23e16f7860936e58aa58ee17da14da2a1911ddae5d1dfe5160b5d7bb73d55e02bb734ea1fb987ccb2a5ee4426dd01255838d3dee381543b7ebb56f07c5d26
SSDEEP

3072:Z8LQFQOf2Vd5/hWm2+1HnLi9RWtABg6z1TwrwQJAaeJvU3LpQH:+nGOhWm2+1HLEnC6yrkgLe

Score

N/A

Malware Config

Signatures

Files

c918f9ee724dce77c8370d2ced80b6a6fe75945b417e61f084a1694c2c49d145
.exe windows x86

1a6e79e7bc8d04c7f581fbe0a17dbb5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
CreateProcessA
GetModuleHandleA
GetStartupInfoA

msvcrt

rand
strcpy
malloc
strlen
memset
srand
time
atol
printf
free
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE