20c9318f8698254c352e3f49c12dce500a8ead06cf03ae30025728b19a8f218f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20c9318f8698254c352e3f49c12dce500a8ead06cf03ae30025728b19a8f218f
Size

130KB
MD5

0c8eacb1dc98e884a57316cbbb8b0cd1
SHA1

53b2eee7f6fc95d320666ad2f254430e1b25a773
SHA256

20c9318f8698254c352e3f49c12dce500a8ead06cf03ae30025728b19a8f218f
SHA512

96f5419deedf6a93956747313bad750e0eefa86fa68f279ad2195aac2c9845902020ad86008ecc388aef0439cda40ce18d6f3035104db770c2cc5cdd88ddad10
SSDEEP

1536:Bflffg9tdMA4wVLl6aFmSUIPVQwcPZlQu69mepxx0EblouCCa6CRg/6d2a6M5Bbd:FlfssgllphJu69mCvb8vg6ZJngfV+

Score

N/A

Malware Config

Signatures

Files

20c9318f8698254c352e3f49c12dce500a8ead06cf03ae30025728b19a8f218f
.exe windows x86

a475308dbd3a096f9f4100eca8c470ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__p__commode
__p___initenv
__p__fmode
_initterm
calloc
atan2
_except_handler3
free
_adjust_fdiv
__getmainargs
__set_app_type
_XcptFilter
_exit

kernel32

SetThreadLocale
VirtualQuery
lstrlenA
GetCommandLineW
GetThreadLocale
GetModuleFileNameW
lstrcpyA
GetProcAddress
GetFileAttributesA
VirtualProtect
GetCurrentProcess
GetModuleHandleW

Sections

.text
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ