4419f554b79faa98f472e7b42bfdafb0c6d761a9eb5caeafdf905b315eb87357 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4419f554b79faa98f472e7b42bfdafb0c6d761a9eb5caeafdf905b315eb87357
Size

77KB
MD5

2bba8364ff18180a8994031b27074faa
SHA1

b2a7a36a9e41b1f9af2332dfa9a380ff33452802
SHA256

4419f554b79faa98f472e7b42bfdafb0c6d761a9eb5caeafdf905b315eb87357
SHA512

417121386fb1f3cd1d1d8f443d376df022ccb2bcac976acc6ada3f5785c2e24a7f9e5a0ceab38a566d6fe8837a267e5a42c39b64844cc8bc603203229045e7ca
SSDEEP

1536:y1a/yYVFM35WPcOie3q+9+zauC+725nRARrymSYUEPrwBVd:yM035IcOie/+a+ORA0pWqd

Score

N/A

Malware Config

Signatures

Files

4419f554b79faa98f472e7b42bfdafb0c6d761a9eb5caeafdf905b315eb87357
.exe windows x86

fa32b33e0c9fe483b187cdb4f052407b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetExitCodeProcess
VirtualProtect
RtlMoveMemory
GetStartupInfoW
DeleteFileA
InterlockedCompareExchange
SetHandleCount
SizeofResource
GetProcAddress
LCMapStringA
RemoveDirectoryA
WaitForMultipleObjects
GetCurrentThread
Sleep
GetOEMCP
GetTempPathA
LoadResource
WideCharToMultiByte
EnumCalendarInfoA
lstrcmpiW
GetStartupInfoA
GetModuleHandleW
SetFileAttributesA
GetModuleHandleA
SetUnhandledExceptionFilter
GetLastError

msvcrt

_XcptFilter
_controlfp
_except_handler3
__getmainargs
__set_app_type
__p__commode
_adjust_fdiv
__p___initenv
__p__fmode
_exit
_initterm

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ