0fb50b0017a9ce36ece5a66c8aa2135b98f196fe166c0f9ed1f435f1a895310f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fb50b0017a9ce36ece5a66c8aa2135b98f196fe166c0f9ed1f435f1a895310f
Size

368KB
MD5

91b44e9411148bc3e2ef06ecc3253d2c
SHA1

043eb8d0bc386e082ce26ca3ddb59e0ec79f398b
SHA256

0fb50b0017a9ce36ece5a66c8aa2135b98f196fe166c0f9ed1f435f1a895310f
SHA512

ba08b5da18c70f182f5f24996eccb7d444c0904aaa1a0a4b0b1cd58f9596019b916be567e66436eca08242a97963b383c5c8974d2d2c3f4bd40c26f86fabb802
SSDEEP

6144:QTeyP+NtCJn2EsSh/SuY2HSNrUuWv0bizw95sgfs4JI5N8g4v1lex48+HOL9z:QFP+XUn2HSAv2HS1UuWv0bi6lIN8R16X

Score

N/A

Malware Config

Signatures

Files

0fb50b0017a9ce36ece5a66c8aa2135b98f196fe166c0f9ed1f435f1a895310f
.exe windows x86

e65885f985cfdf865e5604bf5961a14e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetLastError
GetACP
ExitThread
lstrcatA
GetProcAddress
GetModuleHandleA
GetOEMCP
MoveFileExA
VirtualAllocEx
lstrcpyA
lstrlenW
GetCommandLineW
GetCommandLineA
ExitProcess
IsBadReadPtr
Sleep
FreeLibrary

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ