1c8a74da40c9aa6def6b4325188575e03766d771ee62f5bab9d977f22bc2d663 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c8a74da40c9aa6def6b4325188575e03766d771ee62f5bab9d977f22bc2d663
Size

122KB
MD5

78abcbe5142e801890011ebf676b7a89
SHA1

b7bc2800df3bdaf205588aa8901af716d9eb120a
SHA256

1c8a74da40c9aa6def6b4325188575e03766d771ee62f5bab9d977f22bc2d663
SHA512

9b4441d54dea982251ae374449bdb93431e0a109cbf0e378d9f787e426ae463211f2c0e51bcdb1bce153a925c5890179df18fed448ea7588eb3ae6393acd7f52
SSDEEP

3072:CZgYxfZ7QVuiDe9yV9mOn3YviV+aq5KlToXXRojG:07QVuiAOIzutoXXmG

Score

N/A

Malware Config

Signatures

Files

1c8a74da40c9aa6def6b4325188575e03766d771ee62f5bab9d977f22bc2d663
.exe windows x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 114KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 240B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ