44bcf0cba42b6a6a448ea43f3a0724af090c47593fce1a23542e0ea135eeaa48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44bcf0cba42b6a6a448ea43f3a0724af090c47593fce1a23542e0ea135eeaa48
Size

899KB
MD5

5bde2c8d503f5a3fe1f07fecc8b83b25
SHA1

de5203053b10cfbe525b49d1b4d8a20741e4c4a5
SHA256

44bcf0cba42b6a6a448ea43f3a0724af090c47593fce1a23542e0ea135eeaa48
SHA512

818df980d7a08343cfaffc67852870392d270aeadf314f06649856e45ced441bab8fa2c0b998885d5a842168da74673925c78cb1615f3b4cfb1f7c738524eaa7
SSDEEP

24576:n7abJkS1S6qy18sQBX6c+5vPjxokhxwVP:7fS1b7CwW

Score

N/A

Malware Config

Signatures

Files

44bcf0cba42b6a6a448ea43f3a0724af090c47593fce1a23542e0ea135eeaa48
.exe windows x86

5a09fa16fe73edaf05dc213d4ecf50d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
QueryPerformanceCounter
Sleep
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE