60cc44ce8a759e6cb27a92a1d30fdfb6293566275a23d52c5484170da73da8e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60cc44ce8a759e6cb27a92a1d30fdfb6293566275a23d52c5484170da73da8e8
Size

240KB
MD5

1d36f5184a371e1e933ed0047713a9bd
SHA1

690cbff4a79790c6464cde71184d9dd929fe205f
SHA256

60cc44ce8a759e6cb27a92a1d30fdfb6293566275a23d52c5484170da73da8e8
SHA512

ed91d431d3332940bf4f85f41d3b6bd1b1dbda77eefb9d38fbef0b9d1c66e126d93e1a7013e9bbdee4954e2c3bb8f255be40d78921d178b41f52e70a3eca667a
SSDEEP

6144:3nAGS0a94tTjkAS+LzFHTJ5l4CSJ9LOxxyA:QG+9k4AvLBz/l4C1v

Score

N/A

Malware Config

Signatures

Files

60cc44ce8a759e6cb27a92a1d30fdfb6293566275a23d52c5484170da73da8e8
.exe windows x86

15589604355f26a842f1a2391bbbb9d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsProcessorFeaturePresent
ExpandEnvironmentStringsA
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA
LocalFree
GetCommandLineA
GetVersion
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
IsBadWritePtr

Exports

Exports

SinceMore
WoodGood
onceMoney

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 443KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ