79ea1a02cc8121c84fc57270e42660cdd102686c95e8e06dea9518e45b586133 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79ea1a02cc8121c84fc57270e42660cdd102686c95e8e06dea9518e45b586133
Size

205KB
MD5

082d8448aa886e1cc9a32524ed660361
SHA1

7dfef61281d8036c7592f2a41514d0050533c4d6
SHA256

79ea1a02cc8121c84fc57270e42660cdd102686c95e8e06dea9518e45b586133
SHA512

1f1c3ee2b6e04d9cb6730fe42b41223d74a9d2574621e55a3a1621f970368995c2c83b9147f27c772c4901ea531857fae010c8abf5805a8b723263dc4186e1a1
SSDEEP

3072:x9TTjtrFVk6YabGLEYA1ANmQIUFAsPd3/4462t/QirZ+aJe1mgawzxsBub86S+a8:x9TnX7N0FBAuxUTV5nJTV5nl

Score

N/A

Malware Config

Signatures

Files

79ea1a02cc8121c84fc57270e42660cdd102686c95e8e06dea9518e45b586133
.exe windows x86

b91b0b82085a9d1034137891a762f721

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
LockResource
GlobalAlloc
GetTickCount
EndUpdateResourceA
Sleep
lstrcpyA
GetModuleHandleA
GetStartupInfoA

msvcrt

srand
??2@YAPAXI@Z
??3@YAXPAX@Z
strstr
rename
rand
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
__dllonexit
_mkdir

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ