908cd023a57040b61d992c7e1dcec90e8dac357fe8cc506b8132244e8c70dd98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

908cd023a57040b61d992c7e1dcec90e8dac357fe8cc506b8132244e8c70dd98
Size

149KB
MD5

8160bb4538ba481f1deeec50f4ce4d4b
SHA1

f1f1f786f76a34de60fd3f7a568c6577983874c5
SHA256

908cd023a57040b61d992c7e1dcec90e8dac357fe8cc506b8132244e8c70dd98
SHA512

d9d27a38d769ed76bc95e7f64603811db35832947e50919124868abd40ffa4115a91510b0ea3684784dc967e73ca178414f9ee481da69160563c6038c89258c6
SSDEEP

3072:X6m80g1PVsOgrvD1zr3hANeWeMB12+W19AI050KIXSfElwXaB:58ptKOgrhRyeMBs+LI0yKIXSf6IaB

Score

N/A

Malware Config

Signatures

Files

908cd023a57040b61d992c7e1dcec90e8dac357fe8cc506b8132244e8c70dd98
.exe windows x86

8561accee9448c4eaf6bdc715b4babd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_unlink
__p__fmode
__getmainargs
swprintf
__dllonexit
_XcptFilter
malloc
_mktemp
strpbrk
free
_mbsicmp
fgets
_acmdln
_adjust_fdiv
_strlwr
ceil
__set_app_type
__p__commode
cos
_exit
__setusermatherr
_initterm
exit
_except_handler3

kernel32

GetModuleHandleW
Sleep
VirtualProtect
GetStartupInfoA
RemoveDirectoryA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.5data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE