a960b6520e131294b33217b8e4971beec475823cd14c5eb5e3d148fe38b7bbc0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a960b6520e131294b33217b8e4971beec475823cd14c5eb5e3d148fe38b7bbc0
Size

1.1MB
MD5

5542c86c446b83aa000c43ffa398daa8
SHA1

506e86a7aaaf03d14f92bfd57eac94fd733a1ef1
SHA256

a960b6520e131294b33217b8e4971beec475823cd14c5eb5e3d148fe38b7bbc0
SHA512

13707dcd4c184c11b09e55c1b87fb9aad24ec2daab628f6b010cf11374cadf1d98a617345a3afb69379014280a8033d561bba03e739b3b660e3df13d0d4cd4d4
SSDEEP

24576:Wx8QrZNL0Tuar1O7h2QTGJQ4RAhhdo9WNyE:srWhr1k4B9A

Score

N/A

Malware Config

Signatures

Files

a960b6520e131294b33217b8e4971beec475823cd14c5eb5e3d148fe38b7bbc0
.exe windows x86

478bb001f53aa665494dc970f4bc09ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
LoadLibraryA
GetCurrentThreadId
HeapSize
WriteFile
VirtualFree
WaitForSingleObject
GlobalFree
GetModuleFileNameW
TlsFree
SetHandleCount
GetEnvironmentStrings
GetCurrentProcess

Sections

.text
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 739KB - Virtual size: 738KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ