1981b41e2d5a9382d180a91f5b387d11c0068d6a93e251036a8e410d4d189614 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1981b41e2d5a9382d180a91f5b387d11c0068d6a93e251036a8e410d4d189614
Size

409KB
MD5

705a56b2e046f46d6b40357819944840
SHA1

17dbf4c647ce5f392048d078d24bc0500fd3fbea
SHA256

1981b41e2d5a9382d180a91f5b387d11c0068d6a93e251036a8e410d4d189614
SHA512

e85647fccd6985caaa94609893026cd1226c9a7e4434ea30bd0f166171b31e341360043ac4e6c3f5f55ae687349df80f15f9331453df489c7917825a053ac47d
SSDEEP

12288:7J2ue9QYJkRptmYl1B+iWb9sewSqEoW/j:7JjoIpN8iWb9tRqaj

Score

N/A

Malware Config

Signatures

Files

1981b41e2d5a9382d180a91f5b387d11c0068d6a93e251036a8e410d4d189614
.exe windows x86

1e5d33070fcdbae8f49340ec34a761fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessW
WriteFile
CloseHandle
CreateFileW
GetFileAttributesW
GetTempPathW
ExitProcess
ReadFile
SetFilePointer
GetModuleFileNameW
GetTickCount
HeapAlloc
GetProcessHeap
HeapFree

Sections

.text
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 406B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE