637cb814d29ff1165c5f178cdf1bbc0f285b457b4e8650ea3c61fd16dc3fd609 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

637cb814d29ff1165c5f178cdf1bbc0f285b457b4e8650ea3c61fd16dc3fd609
Size

33KB
MD5

a1a5474ca844bd7b812aca8a7953cffd
SHA1

eef202abb883e83dddc4c167deec6bb143e30465
SHA256

637cb814d29ff1165c5f178cdf1bbc0f285b457b4e8650ea3c61fd16dc3fd609
SHA512

34d0e86b81b5eb81525717c231297bf150dbe6f1b2b0a074f4c9a0527b328c97ecfe027d5e4c49b03b8ebee6ed7652eb75318c8dcff6575177be033b0b615f86
SSDEEP

384:B/curAHmhbpr0qZyZEbkJh3hccQgVJ1ask+noouGeaV41:tHrFnvkLmB0Jj+ouB1

Score

N/A

Malware Config

Signatures

Files

637cb814d29ff1165c5f178cdf1bbc0f285b457b4e8650ea3c61fd16dc3fd609
.exe windows x86

ecd6c937f8b1415d9b83c55b14f92669

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteFileA
ExitProcess
FindFirstFileA
FindNextFileA
GetCommandLineA
GetCurrentDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
GetWindowsDirectoryA
LocalAlloc
LocalFree
MoveFileA
SetCurrentDirectoryA
WinExec
WriteFile
_lcreat
_lopen
_lread
_lwrite
lstrcat
CloseHandle

Sections

CODE
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ