2f69f58597173421638209c3e767116caf0d151e41073fbd22be6b89b4e526f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f69f58597173421638209c3e767116caf0d151e41073fbd22be6b89b4e526f8
Size

431KB
MD5

0c210fde48eafb0c597c6ef949b54d0a
SHA1

aae57d0a4a3a72fd19d106205792b31777a71b75
SHA256

2f69f58597173421638209c3e767116caf0d151e41073fbd22be6b89b4e526f8
SHA512

ecd6b412a7ddfcf239fde3fb2fd53d559345116ef417f88f18f910ecabc7d4b07216f3c7a0790162e174554f3960711345b7273446df0559986daddf8aa6df17
SSDEEP

12288:VXsGTHcxLHHSAOS8vdoPQv/q3rvm1C1p5oEM0LV:VXaFnSq8vdo0geY5oEhLV

Score

N/A

Malware Config

Signatures

Files

2f69f58597173421638209c3e767116caf0d151e41073fbd22be6b89b4e526f8
.exe windows x86

803aa9ae1c8f91e14393d92c8f703a66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
FreeLibrary
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata1
Size: 88KB - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ