0e56559a1e4b766f423873f5c49f95da1cf833a4c21193e6ff161a38c459bf55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e56559a1e4b766f423873f5c49f95da1cf833a4c21193e6ff161a38c459bf55
Size

87KB
MD5

5713940d292478774c5c2d0675672dc0
SHA1

d283c0d9e87337be415d557b294a6022e19c735b
SHA256

0e56559a1e4b766f423873f5c49f95da1cf833a4c21193e6ff161a38c459bf55
SHA512

dc6b26e0e41f6c3d0f62d4eb027c61d444192fed873cac8b0e01990381ca046a90968b5411377d6926fc1596fba6244f440af787f1f8d51f8f05392914b782ce
SSDEEP

1536:cewHpI/VLZ9oWxCMiGsvvnPI6EgGEUSMF01FP5xZRf/uouj8kGNNpux1XQNKSvnf:cespIBoWxCMiGYPInEUOB79TR

Score

N/A

Malware Config

Signatures

Files

0e56559a1e4b766f423873f5c49f95da1cf833a4c21193e6ff161a38c459bf55
.exe windows x86

ba6fe3de0d0592b7c4e3553ae7d8b342

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
GetProcAddress
GetModuleFileNameA
GetTickCount
LoadLibraryA
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
CloseHandle

shell32

ShellExecuteA

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ