b784f08a05c2cf4d239cc2c46e1d8d3d91a9682064e666ea27565b456cd25040 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b784f08a05c2cf4d239cc2c46e1d8d3d91a9682064e666ea27565b456cd25040
Size

120KB
MD5

931aad875d19da4c7c283e45271ec513
SHA1

8a1fe0a015b37dd54a4e5d795099603987c8e300
SHA256

b784f08a05c2cf4d239cc2c46e1d8d3d91a9682064e666ea27565b456cd25040
SHA512

9797c7c424884c4fe11e085f2140d4a14d6a921373bb16896b0f434c2d3430d4ff0ed257a279fc0a133f7f3da94b9feb2cd467d725139b3b3618b218e9e4e93f
SSDEEP

1536:096Xi7VO8S5UC7oz+hFx/TlIlBOcw4f131ludGSNZupakXDl11DON08/PNZ4AUxO:6j7VO8JzYd9gNam9l11DON0ifTvQ4YW

Score

N/A

Malware Config

Signatures

Files

b784f08a05c2cf4d239cc2c46e1d8d3d91a9682064e666ea27565b456cd25040
.exe windows x86

af3ebd978288f351d5bbc11888f31302

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

free
__getmainargs
_exit
__p___initenv
calloc
_adjust_fdiv
__set_app_type
_controlfp
_except_handler3
__p__fmode
__p__commode
_XcptFilter
__setusermatherr
_initterm

kernel32

GetModuleHandleW
GetExitCodeProcess
GetProcAddress
MultiByteToWideChar
QueryPerformanceCounter
GetSystemDirectoryA
TerminateProcess
RtlUnwind
VirtualFree
FlushFileBuffers
GetTempPathA
GetStartupInfoW
SetFilePointer
lstrcpyA
RemoveDirectoryA
GlobalLock
GetProcessHeap
VirtualQuery
VirtualProtectEx
GetCommandLineW
GlobalAlloc
GetStringTypeA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ