fb27bbb051cce358d9e304041cd646cdfab44fb993006a6d32b56932158beafe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb27bbb051cce358d9e304041cd646cdfab44fb993006a6d32b56932158beafe
Size

47KB
MD5

0527772583d3abdc1025c4ec3a2f5f6b
SHA1

989c8637533db6bb44af359f217be0df4f5e7554
SHA256

fb27bbb051cce358d9e304041cd646cdfab44fb993006a6d32b56932158beafe
SHA512

aeb6c904178d6ca472d51a4c4344d6aadcfb4c2905d7afe7bbdb129417418b35118e0b96bccac48ec3f4db0a98e0cd53ded152d7c234aab5b60a59d33a394378
SSDEEP

768:yqUJ0jIoZm4ZogWRTZulrnoYRYMMDHjvEXirf8xXmt0m6Q4OU38gjR:sejIoZm4+RRyokYMMHYirCX7QTW3jR

Score

N/A

Malware Config

Signatures

Files

fb27bbb051cce358d9e304041cd646cdfab44fb993006a6d32b56932158beafe
.exe windows x86

a8ba83904b8e0c4a3e425eca1920aaaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetCommandLineW
GetStartupInfoW
GetCurrentProcess
CloseHandle
WriteFile
CreateFileA
ExitProcess
SetFileAttributesW
Module32First
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
LocalFree
GetLastError
FindClose
OutputDebugStringA
FindResourceA
LoadResource
SizeofResource
Sleep
GetFileAttributesW
MultiByteToWideChar
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW

advapi32

BuildExplicitAccessWithNameA
SetEntriesInAclA
SetSecurityInfo
InitializeAcl

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ