661c05ecb13436a07127818c9bca6a8a0fdf4097277a6408b4a4f879d1391410 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

661c05ecb13436a07127818c9bca6a8a0fdf4097277a6408b4a4f879d1391410
Size

91KB
MD5

a2bcae4e8c5bdd50dcfbf25854e42a69
SHA1

06b9ae8eb3d205cd68f174b3d038b1c697aef71f
SHA256

661c05ecb13436a07127818c9bca6a8a0fdf4097277a6408b4a4f879d1391410
SHA512

72211c279d59343ca0a0c2a733045ef7f84faca2224429b795f31977b78c353e4aef0046e5f54212adc10f8b3d65c5e53f4544d757d2352f9e15e94dd0c8d745
SSDEEP

1536:EaFSqEkQ3kYohMeWpDeamv9scg61YXD5e6G6:EMED3HoSeWpytlscg6CXD5v

Score

N/A

Malware Config

Signatures

Files

661c05ecb13436a07127818c9bca6a8a0fdf4097277a6408b4a4f879d1391410
.dll windows x86

e26d7460d0c04056b9226a899477ba4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
CloseHandle
OpenProcess
LoadLibraryW
GetProcAddress
GetVersionExW
GlobalFree
lstrcpyW
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
VirtualAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers

Exports

Exports

FindProc

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ