c78663e548b7ace2fb11169104a27d122cdd57d87974d025a3bac7c5ffa8550b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c78663e548b7ace2fb11169104a27d122cdd57d87974d025a3bac7c5ffa8550b
Size

77KB
MD5

015aac0b2ef7b1589ce38e3cbf62a236
SHA1

3e8cb42f112577da02f9d67ce30502014e01fa98
SHA256

c78663e548b7ace2fb11169104a27d122cdd57d87974d025a3bac7c5ffa8550b
SHA512

ea8d05d2df7d930fcc0ac9352ad0c8848448ef135387c765e3dd5708e9719f0089458f391e3d53ef1a6bfa4f5062b69fe8eb90a2cad5337f56f36ae682f76cf0
SSDEEP

1536:G7KMFFuOs0JLlL407KxKn2JBYyEduYpBNs7bnYXTQ5MRx8DBDWLG:G73PFLlL4cKKl4tUTQ5ML8DRWC

Score

N/A

Malware Config

Signatures

Files

c78663e548b7ace2fb11169104a27d122cdd57d87974d025a3bac7c5ffa8550b
.exe windows x86

b86bf0b10fd82a7b88058be04d14c26a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
SetStdHandle
GetUserDefaultLCID
OpenProcess
CreateDirectoryA
GetThreadLocale
GetSystemInfo
GetModuleHandleW
lstrcmpiW
LoadResource
GetModuleHandleA
GetSystemTimeAsFileTime
SizeofResource
SystemTimeToFileTime
RtlMoveMemory
WaitForSingleObject
WideCharToMultiByte
GetCurrentThread
GetStringTypeW
GetTempPathA
VirtualProtect
InterlockedExchange
GetDiskFreeSpaceA
VirtualQuery
GetProcAddress
DeleteFileA

msvcrt

_exit
_XcptFilter
__p___initenv
__p__commode
__p__fmode
_controlfp
__set_app_type
_initterm
_adjust_fdiv
_except_handler3
__getmainargs

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ