4eae022ee1326daf3c9fce45e7e54f0f6781dbc759aed4b432271de5f79503d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4eae022ee1326daf3c9fce45e7e54f0f6781dbc759aed4b432271de5f79503d2
Size

187KB
MD5

4c49b20b9be564c6993e8a0b0ea2d020
SHA1

ad3415d8f4206ac5a178245eb48b78f6e67bd6a0
SHA256

4eae022ee1326daf3c9fce45e7e54f0f6781dbc759aed4b432271de5f79503d2
SHA512

507a0bbb1baae11a7eba46b933f7ddc03c27aa48cdef3e688775a3f91e33e88cfc2457f0e5ad7572e10bf7f2336b3ce3999fea2e1a7cfac88c649d267c3ecec0
SSDEEP

3072:FN/b/jk6Zo0Bro255DDs5z3Ig+AJPFUQTXI3lqlUoNrQ:Fh7k6ZLT55Do5zI21uzHoR

Score

N/A

Malware Config

Signatures

Files

4eae022ee1326daf3c9fce45e7e54f0f6781dbc759aed4b432271de5f79503d2
.exe windows x86

865df307f560ffebd2e29acda46151be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
FreeLibrary
MultiByteToWideChar
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryA
ExitProcess

gdi32

CombineTransform
Arc
RectVisible

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ