374ecb8cfe01166680b92cfa1eb49935014ec3a5ccfcb4fd161388b32102eb88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

374ecb8cfe01166680b92cfa1eb49935014ec3a5ccfcb4fd161388b32102eb88
Size

460KB
MD5

16181b4b66bd98c106d90d4abe80f2d2
SHA1

2a5ce878ed0bb5dcbd8c946111d847d5e30287f1
SHA256

374ecb8cfe01166680b92cfa1eb49935014ec3a5ccfcb4fd161388b32102eb88
SHA512

4cc00ac1107cf1f053ba3f883daee4a1b50571b4c04af5e2f03a3ffab29ec44f01a38d51a1618d710abcd1d0f29fdfd400e5f26cfdc5a1d9b2e2d8e9e6c86bb5
SSDEEP

12288:L0bL/+oJNp2/qRBNTViZ7OwAJ12RfYWfjW:Y+oJNAqRhiZRAP2aa

Score

N/A

Malware Config

Signatures

Files

374ecb8cfe01166680b92cfa1eb49935014ec3a5ccfcb4fd161388b32102eb88
.exe windows x86

abaea6a12056de0b1cc60371f514c08c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
SuspendThread
CloseHandle
Sleep
GetProcAddress
LoadLibraryA
TerminateThread
GetSystemInfo
VirtualProtect
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualQuery

user32

SendMessageA

Sections

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 408KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ