ab17374210075205f17cc028240016b0ce6e2e6b6c03081d1011956f977b5c43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab17374210075205f17cc028240016b0ce6e2e6b6c03081d1011956f977b5c43
Size

22KB
MD5

594f6cca162c936a19cffb85beb5e7a0
SHA1

a1e748a570dec0b00397f5605ace42ea67cae613
SHA256

ab17374210075205f17cc028240016b0ce6e2e6b6c03081d1011956f977b5c43
SHA512

3b2efeceea6a5ffc010da0c1e0de8e0c87953bd3cd946293d75aec706c5ce7851e87cbd22694b6736c275e4329b4ae7f7ce17e9e9b49a43bc7ca60f27d1ec08c
SSDEEP

384:2Mv0aVJOt2obD3/HhzF8N+HBnFIy+YPe6xagk58sCub2i:373OtJDvhzNsyXk58sCuSi

Score

N/A

Malware Config

Signatures

Files

ab17374210075205f17cc028240016b0ce6e2e6b6c03081d1011956f977b5c43
.exe windows x86

bbc712c81dbe5f313d887223f25de84e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetStartupInfoW
RtlUnwind
DecodePointer
EncodePointer
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetOEMCP
GetProcessHeap
GetSystemPowerStatus
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
OutputDebugStringW
SetLastError
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ