4b97862eac8104e7fdb5ff36499da0ac120e00839a7453bcf27578071b6febbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b97862eac8104e7fdb5ff36499da0ac120e00839a7453bcf27578071b6febbd
Size

92KB
MD5

771f40b9715dd88d4f6f4fd1f67ae440
SHA1

50655e9c22ad6067bc3b0c926d272e81a227659b
SHA256

4b97862eac8104e7fdb5ff36499da0ac120e00839a7453bcf27578071b6febbd
SHA512

4fcdf530f3fd8473aaef4c88f942ed8d9f79dbaeaca19934fc86a6dab87b12a7dc74b05511e527cc9568f353cb7d79edca7c3114ca39a2a13f8c1978ffd78849
SSDEEP

768:k6tsfyQBVFoU4BwUcz6GrFNUntq2ih/vMSe2pJ6LxGsRB2aPZG2B4:k6thaoyUht7O/vZ6Ls2B2aPZf4

Score

N/A

Malware Config

Signatures

Files

4b97862eac8104e7fdb5ff36499da0ac120e00839a7453bcf27578071b6febbd
.exe windows x86

705cbe71b06353bac3360f8e798fc146

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
FindFirstFileA
LoadLibraryExA
LoadLibraryA
CreateProcessA
WinExec
_lopen
CopyFileA
MoveFileExA
MoveFileA
OpenFile
CreateFileA
GetEnvironmentStringsW
SetHandleCount
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
GetProcAddress
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
FindNextFileA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
WriteFile
LCMapStringA
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

FindExecutableA
ShellExecuteA
ShellExecuteExA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE