fa50cf82c4501f5dc70a775698bf2c6a5aba477924722add5d1d39e87f4dfd94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa50cf82c4501f5dc70a775698bf2c6a5aba477924722add5d1d39e87f4dfd94
Size

672KB
MD5

903225653fe3d06a203f334d8fa07890
SHA1

cf5eccb95942c1bb187f7c5d511d3c8a23dc19dc
SHA256

fa50cf82c4501f5dc70a775698bf2c6a5aba477924722add5d1d39e87f4dfd94
SHA512

1968346bb5e04251eddf901a59533a153e1e880c6285c3132015017f8a1b40654fe9c3e46b89d0bb07e6456c40278910fff0dca5b1ba581993eefa37e8a65a64
SSDEEP

12288:+lmhLR6WSHFuFtCT85JB98claAmt+CINnYdl+j9AMFVxuqHG2xb:+kHSHIFI0m7INYdlYGIMQV

Score

N/A

Malware Config

Signatures

Files

fa50cf82c4501f5dc70a775698bf2c6a5aba477924722add5d1d39e87f4dfd94
.exe windows x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 664KB - Virtual size: 664KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE