65018d7df0da12744a2253ba551aa697abcb58f5fa9f6d32a15578cd3871bc08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65018d7df0da12744a2253ba551aa697abcb58f5fa9f6d32a15578cd3871bc08
Size

192KB
MD5

9348067db144dc2ad472ff8a7a21d9c0
SHA1

14c271e164fbce805ab188c3400770e712400f19
SHA256

65018d7df0da12744a2253ba551aa697abcb58f5fa9f6d32a15578cd3871bc08
SHA512

8d6abd1cd5dd077f11273252c4717722b60a63d665098ed9a519bc6ac26076bd57f34bd81a9fc66eec8b3cf8945bac7913f6f8d7f60b351463e03d53f0084f22
SSDEEP

3072:nTEFRWuPtw2FlinJHR6FihuZXieYXNnxNnHBaFSZFY6ql3AZf+e2MDD:nTGzPtw266QhuZX7c3HBaFSg6SAZwq

Score

N/A

Malware Config

Signatures

Files

65018d7df0da12744a2253ba551aa697abcb58f5fa9f6d32a15578cd3871bc08
.exe windows x86

d84a1f1a5f6dc478461d88b1a559382f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDeviceGammaRamp
RectVisible
SelectFontLocal
CombineTransform

kernel32

ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
LoadLibraryA
MultiByteToWideChar
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ