968f64f15bef472865e765c78b36c4f0d0cf804bd4571413d501eb4fc9211265 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

968f64f15bef472865e765c78b36c4f0d0cf804bd4571413d501eb4fc9211265
Size

200KB
MD5

90878837d41f7d8ae533c23b1cbcceed
SHA1

c1525381762c71815d3cd69edf3e6ce57518eb77
SHA256

968f64f15bef472865e765c78b36c4f0d0cf804bd4571413d501eb4fc9211265
SHA512

6f0a82286c5470db26e36554b363e30201bd6129b1f691afac10d7583212b93679ae4688217a1a15990b6a9b996b00c0239a416222e63bd978890fb1a8d342ba
SSDEEP

3072:KwGLW45OXbsT5hhnXaOHLTXdtm3P37i4XJHL62wGQ5+aJe1mgawzxsBub86P+aJi:KwGLjO0ZrQFKyTV5nmTV5nR

Score

N/A

Malware Config

Signatures

Files

968f64f15bef472865e765c78b36c4f0d0cf804bd4571413d501eb4fc9211265
.exe windows x86

b91b0b82085a9d1034137891a762f721

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
LockResource
GlobalAlloc
GetTickCount
EndUpdateResourceA
Sleep
lstrcpyA
GetModuleHandleA
GetStartupInfoA

msvcrt

srand
??2@YAPAXI@Z
??3@YAXPAX@Z
strstr
rename
rand
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
__dllonexit
_mkdir

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ