a1d59a6b22acc693494a5b0134e199712db47b37fb1fb282a2d0faf05a220980 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1d59a6b22acc693494a5b0134e199712db47b37fb1fb282a2d0faf05a220980
Size

136KB
MD5

a31ed14c6eca802c152c305d44d54ff0
SHA1

41972d184f7d0b163c9afa5c913ae970fba26dc3
SHA256

a1d59a6b22acc693494a5b0134e199712db47b37fb1fb282a2d0faf05a220980
SHA512

88cf4a1a1fd72ced6d486d52af2791cd8b6909cf0183a1bb279fc7346f04a439c3c9a14f48e08c861593810fa74fdb28c5994e4f6b28873f610a7df228a63b69
SSDEEP

1536:59GC1UPoOkEGoM9q8JIMEYyBdDfUK5I0YX71CGq3d4oBFUblSpil3T9Pe1:bcoOKb6WyBetBnroBFISpOD9Pe1

Score

N/A

Malware Config

Signatures

Files

a1d59a6b22acc693494a5b0134e199712db47b37fb1fb282a2d0faf05a220980
.exe windows x86

7e539c3380b79f9ac11d33de13cb666f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
DeleteFileA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

EndDialog

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ