fb0fd862e868a064d4e411f43acc7e7c82858a7dc1e649896393ced66b309c29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb0fd862e868a064d4e411f43acc7e7c82858a7dc1e649896393ced66b309c29
Size

21KB
MD5

0e70921b2e03259acd1d3db8b640694f
SHA1

7cd09642b1f13c2df75079d55be13287af53d150
SHA256

fb0fd862e868a064d4e411f43acc7e7c82858a7dc1e649896393ced66b309c29
SHA512

ee853ec81b9d31499d516352a30d4315a1c97024643434e7c376dea2def8205455af9963fc5746e4562c0bd4a4333b125a940bee181852caa7f61f26497fa508
SSDEEP

384:RCEVMdFH6VzBm1WlL/hxlwx0A4fRnILEPjNO+pgPM7e0fiCwJVpMQb8GTy0+S0:RCTFaVVm1o/mxZWGPM6Mwnzb/TPd0

Score

N/A

Malware Config

Signatures

Files

fb0fd862e868a064d4e411f43acc7e7c82858a7dc1e649896393ced66b309c29
.exe windows x86

0d008d9c0edbe21b215469179e08a66b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetStdHandle
WriteFile
LCMapStringA
lstrcpynW
lstrcpynA
MultiByteToWideChar
GetACP
TerminateProcess
GetStringTypeA
GetStringTypeW
lstrcatA
CreateFileA
GetCommandLineA
GetVersion
LCMapStringW
GetStartupInfoA
GetModuleFileNameA
GetFileType
SetFilePointer
SetHandleCount
GetCurrentProcess
GetOEMCP

user32

IsWindow
DrawTextW
DrawTextA
CreateIcon
DrawIcon
LoadMenuA
GetDC
CopyRect
GetWindowTextA

comctl32

ImageList_Create
InitCommonControls
ImageList_GetIconSize
ImageList_DrawEx
ImageList_AddIcon
DrawStatusText
ImageList_DragEnter
ImageList_GetIcon

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ