ba40a5270f1240bb2b825d8ae742c57d8ef85cb9940507fa433241d7e5d47a4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba40a5270f1240bb2b825d8ae742c57d8ef85cb9940507fa433241d7e5d47a4a
Size

27KB
MD5

0f55266531a27105ca4d1b53e22e9ea2
SHA1

71f4a384e64492797bf4080c5fea3d129ce4c51d
SHA256

ba40a5270f1240bb2b825d8ae742c57d8ef85cb9940507fa433241d7e5d47a4a
SHA512

c3ca86b011d915e67b3ded7441e189354a78414aecb2fb0d63aa43ee919a2907298ac7523d778661f86c50d620706d7eb6ff7ee600ed78f0edb44a247f2b6423
SSDEEP

768:bzNfs1DdBTLJKRX5s7q3K14HnskIO5IL7jP+6Iu7Xm0nLrSZ:bzNfs1ARS7q3KAndIKIfjnIu720nLe

Score

N/A

Malware Config

Signatures

Files

ba40a5270f1240bb2b825d8ae742c57d8ef85cb9940507fa433241d7e5d47a4a
.exe windows x86

eb396797b13ef3fc090adafa7654ae9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
Sleep
DeviceIoControl
CreateFileA
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
InterlockedCompareExchange
InterlockedExchange
UnhandledExceptionFilter

msvcrt

__getmainargs
_cexit
_exit
_XcptFilter
exit
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
memset
atoi
_vsnprintf
__p__commode

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE