364f160252887241c6a4550d6b4c09948977d6356f6f00917c050ef5ba00df48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

364f160252887241c6a4550d6b4c09948977d6356f6f00917c050ef5ba00df48
Size

115KB
MD5

5842390752845ad497470680345489e2
SHA1

55612e8cdce457158243923e907e290e0568c4d2
SHA256

364f160252887241c6a4550d6b4c09948977d6356f6f00917c050ef5ba00df48
SHA512

47fd313106762bb56bfb10c5a25c8dd4aece95371f5613d3baafa1cebe6baabd040a3cc801137a1d03fba8c58ab9b16c45b8e99aab732f583833aef3455b49a3
SSDEEP

3072:jW5MbnownJBRxteYScB0C5omskBTU873k:jgsJHHehQv5nBu

Score

N/A

Malware Config

Signatures

Files

364f160252887241c6a4550d6b4c09948977d6356f6f00917c050ef5ba00df48
.exe windows x86

e4bed1c0ed5f0904c6d73d069fefaffc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
DeleteFileW
LCMapStringA
GetOEMCP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
LCMapStringW

user32

IsDlgButtonChecked

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 613KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ