133e34cecfa3678d41747cc9dad0f843037b151bc78790768418aa6bf530c644 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

133e34cecfa3678d41747cc9dad0f843037b151bc78790768418aa6bf530c644
Size

95KB
MD5

527ff69125658791a1e2c2d0be8d0cfa
SHA1

6ee941455a7fa11b5f7b374f1704aa8def4f0841
SHA256

133e34cecfa3678d41747cc9dad0f843037b151bc78790768418aa6bf530c644
SHA512

0518b4694fffaaa0a108a717bae19d1b97488e5d5c9f953da793a649e97c8fad51420f4ede70a1498b829b18de0ae5b6626d3f0e87827a081e208044832e2367
SSDEEP

1536:7Ui+PinPOTg5CIMSD9tZ8aInD9w514hK262BiCqMwV8rthNb5X0nur1zA6TLS2Si:1nmE5CsgaInDOr4k2JBiCsarHlCurK+S

Score

N/A

Malware Config

Signatures

Files

133e34cecfa3678d41747cc9dad0f843037b151bc78790768418aa6bf530c644
.exe windows x86

8b4cc2be0324264fac1338e1727600aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ