18d45cef8a2abbfd803a17348b3a6003fee67ce5d556d1e5e41e5a542792fcc2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18d45cef8a2abbfd803a17348b3a6003fee67ce5d556d1e5e41e5a542792fcc2
Size

891KB
MD5

78af150ce2a881f8809c285ff35fb032
SHA1

ecf0163d7503399f4c21ceea82cd4c1cc7e24cc8
SHA256

18d45cef8a2abbfd803a17348b3a6003fee67ce5d556d1e5e41e5a542792fcc2
SHA512

7c64ff7a79010d84858a2ac2971ff3ef5bfbb8e6aecdc556bf99f687a7b51b200fe3544a35519af60bb0d41965f9d443fba8ad543a7ccb74ecd8c95a27f39320
SSDEEP

12288:ziLZQvz73Vu9ez6Ep5xJXPPt9DjPnCyxo2x4ltzrshler:ziLZQvzxuc6ETvDbnuFlBg+r

Score

N/A

Malware Config

Signatures

Files

18d45cef8a2abbfd803a17348b3a6003fee67ce5d556d1e5e41e5a542792fcc2
.exe windows x86

4215be09c167fd0e742573831e511ccc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleFileNameA
VirtualAlloc
GetProcAddress
GetCurrentThreadId
FindFirstFileW
Sleep
TlsGetValue
GetCPInfo
VirtualFree
GetConsoleCP
GetEnvironmentVariableA
GetCurrentProcessId
WideCharToMultiByte
SetUnhandledExceptionFilter
GetCurrentDirectoryA
LocalFree
GetOEMCP

Sections

.text
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ