b31908ea60f9f96e4551235897475333fc5923133f420b1b6d241a50ec503cf4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b31908ea60f9f96e4551235897475333fc5923133f420b1b6d241a50ec503cf4
Size

304KB
MD5

5a46f75dc20be2ff4ec166f9a963ef10
SHA1

05411f17884108c69e7bd4e390570cbba6847bde
SHA256

b31908ea60f9f96e4551235897475333fc5923133f420b1b6d241a50ec503cf4
SHA512

ca61aa021b952f8586fcb819d8649490a38eeca35fae6e63c0adcf6f64174615c65295f49d48015be10bc4c1f5109d958b2931f9db9776d99a540e4d5bb57e90
SSDEEP

6144:FmEj5emdW7ghcKiy8PQbxfsK9Z8+L28FVTSgrLHWuanesHaAbid:sEj0h8K9+g6lSgrL2rnHaAbid

Score

N/A

Malware Config

Signatures

Files

b31908ea60f9f96e4551235897475333fc5923133f420b1b6d241a50ec503cf4
.exe windows x86

99f5b0b723d6fca2813f516623081e1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ