2220a561d0a88b4a0e4f5cbc34461bc5274e1e93e5f38ccafffbf19d9a6980c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2220a561d0a88b4a0e4f5cbc34461bc5274e1e93e5f38ccafffbf19d9a6980c0
Size

75KB
MD5

962a8d26c752615ce43b68e50b7c1cd9
SHA1

7728ff68b6c10e8a24f5ffc0b778c484510da4a0
SHA256

2220a561d0a88b4a0e4f5cbc34461bc5274e1e93e5f38ccafffbf19d9a6980c0
SHA512

fe58979773542297e7e637a0a0d70874627936de67cb59a87f119c296af5ce173cb260c1a6dda0efcba1d080273636cac8fce879c4bcb53159c40a7a2f939389
SSDEEP

1536:wj8d0QHjiifOBqvUlEhHJbdNEGm6DjIAJBV3L+lfDTw:wj8d0iiifO+hHJbDEGm6ooBkw

Score

N/A

Malware Config

Signatures

Files

2220a561d0a88b4a0e4f5cbc34461bc5274e1e93e5f38ccafffbf19d9a6980c0
.exe windows x86

8d1f3607f6f644aa45436b6badedcfb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
VirtualAllocEx
VirtualFree
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE