429a8f577972fead21ed7a3c78f94b5e8ea52918c7f77385cf898e13ab04c24e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

429a8f577972fead21ed7a3c78f94b5e8ea52918c7f77385cf898e13ab04c24e
Size

180KB
MD5

5b6beb9b72d5eaf354d80c3f045c9020
SHA1

db08953a0a402d2db841d87b847b6eb339cb76ad
SHA256

429a8f577972fead21ed7a3c78f94b5e8ea52918c7f77385cf898e13ab04c24e
SHA512

85be2faf414a67cfe2448e1e634082cbed51419225e652083a3501a61d5403519bd36c6f8f066b49da14e20ee67b3ca523a2b604181ccd365422c6bf0ad79ec9
SSDEEP

3072:Cu1yoEZDJPKlQQfwYICeAuvCI8pRiGuKLJ2cl8j9LMHm:Cu1y1ZDQWlv3ABRiGuKL4cWZ

Score

N/A

Malware Config

Signatures

Files

429a8f577972fead21ed7a3c78f94b5e8ea52918c7f77385cf898e13ab04c24e
.exe windows x86

7f65ac8571811aadbc9d4f71d2d112f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
GetProcAddress
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
LoadLibraryA
LocalReAlloc
MultiByteToWideChar
GetCurrentProcess
SleepEx
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
GetCurrentConsoleFont
GetCommandLineA
FreeLibrary
ExitProcess
SetThreadAffinityMask
CreatePipe

gdi32

ModifyWorldTransform
GetViewportExtEx
CombineTransform
Arc
SetMapMode

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ