809658a9d5a894cd9973a47ebbef4d94cec3d07a853bb384cb3b318db6640602 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

809658a9d5a894cd9973a47ebbef4d94cec3d07a853bb384cb3b318db6640602
Size

80KB
MD5

0e72c680fe0749565e8c490907dbe3a4
SHA1

2ff12c2e174afd683185671824704345989d4e9f
SHA256

809658a9d5a894cd9973a47ebbef4d94cec3d07a853bb384cb3b318db6640602
SHA512

cf4269fdd970cc1c2b67219678ba69e391c4b020b5c84ecaf9dbf4dc2f821efa6377c5c0c18e35b27a7fa2193bdf9f3063d4b44308a8def9270db80b76c6f61e
SSDEEP

1536:AVRWBDflcux/oPwlUnqyFgt/D2tfMvN60ZGOtDVhLQ4k9D9AkSjhbc:AGBDlcWAP1n5Fgtbk0FBV24k9Ovj2

Score

N/A

Malware Config

Signatures

Files

809658a9d5a894cd9973a47ebbef4d94cec3d07a853bb384cb3b318db6640602
.exe windows x86

762870ee63b53878795c891256d20548

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetCommandLineA
GetLastError
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapAlloc
TlsAlloc
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetStringTypeW

user32

LoadCursorFromFileA
ScreenToClient
ShowCursor

gdi32

CombineTransform
CancelDC
GetMapMode

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE