a186f56642a1fab10b0473d849cb5e3a9873859fde22d917fca80535b6e1b0b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a186f56642a1fab10b0473d849cb5e3a9873859fde22d917fca80535b6e1b0b5
Size

17KB
MD5

595d1a9dda2858d12fe7e6dc2ff6a310
SHA1

808717399e94038d45dec112e15bac6ff58ed270
SHA256

a186f56642a1fab10b0473d849cb5e3a9873859fde22d917fca80535b6e1b0b5
SHA512

f8e43a9805662393fbb4697a1fdefb70ad70c84a80d413b4544d0c16f46cd26bb1c7056a082ef66b594957fa1ed41177a6c945a8f8f8358a8491f8ae67ee2ac1
SSDEEP

192:6zdrdpHCuyLldmugv8K+K+JFkqVJP2JiupC1tS21UCV:6pWughVe4OCV

Score

N/A

Malware Config

Signatures

Files

a186f56642a1fab10b0473d849cb5e3a9873859fde22d917fca80535b6e1b0b5
.exe windows x86

5939011907b3c0ec6752dec24351da96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
CreateWindowExA
LoadBitmapA
TranslateMessage
SendMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
LoadCursorA
TrackPopupMenu
FlashWindowEx
GetKeyState
TranslateAcceleratorA
RegisterClassA
GetWindowTextA
DispatchMessageA
GetDlgItemTextA

kernel32

HeapAlloc
GetModuleHandleA
FindFirstFileA
FindClose
HeapCreate
FindNextFileA
CloseHandle
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ