52144d86c47493b334a6612a26a60f5b4db84ec29e9326a5293343364f01480e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52144d86c47493b334a6612a26a60f5b4db84ec29e9326a5293343364f01480e
Size

92KB
MD5

4f26e1e340ae2de9b2be62c41f4e69d0
SHA1

5610e42ac745ff0beec536373bb579772ea9a18e
SHA256

52144d86c47493b334a6612a26a60f5b4db84ec29e9326a5293343364f01480e
SHA512

240a4dac7e3e136a76e2cfab73cc4bf08f06d120291dc8e96ca40be16e5fdf275ada6eb863f87617ec1157e11b7ee828549829df3d2754aa3ffa03a7ceacd90a
SSDEEP

768:n6tsfyQBVFo8Tn5sDPXmRKddQy0kyKWaO2Xh2Yc+CW08xLI:n6thao8La8KEqWAXbc+Cz8xU

Score

N/A

Malware Config

Signatures

Files

52144d86c47493b334a6612a26a60f5b4db84ec29e9326a5293343364f01480e
.exe windows x86

705cbe71b06353bac3360f8e798fc146

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
FindFirstFileA
LoadLibraryExA
LoadLibraryA
CreateProcessA
WinExec
_lopen
CopyFileA
MoveFileExA
MoveFileA
OpenFile
CreateFileA
GetEnvironmentStringsW
SetHandleCount
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
GetProcAddress
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
FindNextFileA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
WriteFile
LCMapStringA
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

FindExecutableA
ShellExecuteA
ShellExecuteExA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE