f01c3441568e95e438e74019fb6e53e619d693d4b021ba50657bbe64959e71c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f01c3441568e95e438e74019fb6e53e619d693d4b021ba50657bbe64959e71c2
Size

50KB
MD5

43139b326a084ce18c2ac3cc40b3e658
SHA1

35d7f6205893b60802b06a3087ce74ae35ae68a1
SHA256

f01c3441568e95e438e74019fb6e53e619d693d4b021ba50657bbe64959e71c2
SHA512

264138e32cdb2e804fc4b85b08a5a56a072c2b2e11269eb2cb69dc8b07b605b368e99b5fd1abd4e9dcff5dae01fa4a0b5c2e16da51d896248602058ec2183344
SSDEEP

768:V1QM9CFilbA7Oc5fpVZRYMMDHjvEX2nT+ipe8tDWU/LR2NBZpmjEJ+lq:xWi5AzfXYMMHY2nT+ipeYv2ND4xq

Score

N/A

Malware Config

Signatures

Files

f01c3441568e95e438e74019fb6e53e619d693d4b021ba50657bbe64959e71c2
.exe windows x86

40656839aca8d3facdb9758e3cd30bda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetFileAttributesW
GetModuleFileNameW
Module32First
CreateToolhelp32Snapshot
CloseHandle
WaitForDebugEvent
ContinueDebugEvent
CreateProcessA
GetCommandLineA
GetStartupInfoA
OutputDebugStringA
SizeofResource
LoadResource
FindResourceA
ExitProcess

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ