d19c14db6d1f369895c5c77712940779940453ef0a9ffba5025ac1d3d29c76ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d19c14db6d1f369895c5c77712940779940453ef0a9ffba5025ac1d3d29c76ea
Size

171KB
MD5

087444c0b8be4a55bbdb49ffd0ab11f0
SHA1

d0aef5cbdf17456100f615cb37e04ef49653182f
SHA256

d19c14db6d1f369895c5c77712940779940453ef0a9ffba5025ac1d3d29c76ea
SHA512

48c438605a4ba6e6c290b60d997135ae138bf6c166f09afab8af7290c503565d6580918250436cf185b38e0961e7aaa789b472946a92982d9881da3b9ff77ffd
SSDEEP

1536:8haN2fh0+TTQInoWGJcJJleqt1+Wgx3lFnHmleHSWgLAyXnnLm+Anqf+TtUwIS7F:2++TFnoWTTYBB1hHgN1Anqf+TS7S8M

Score

N/A

Malware Config

Signatures

Files

d19c14db6d1f369895c5c77712940779940453ef0a9ffba5025ac1d3d29c76ea
.exe windows x86

1e981a857730d2d2d49c3cc3486f0953

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVolumeInformationA
GetSystemInfo
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ