fc399f2d331771ab2c33f79ce8faa8d1268277c4c1c2331a4aa3e86f68dcfc4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc399f2d331771ab2c33f79ce8faa8d1268277c4c1c2331a4aa3e86f68dcfc4c
Size

999KB
MD5

a972a68f09b5597b209bdd9517fee299
SHA1

b451fad1828c900b0a98f4fc1526e09ba90e6438
SHA256

fc399f2d331771ab2c33f79ce8faa8d1268277c4c1c2331a4aa3e86f68dcfc4c
SHA512

8a1716a9798be2964679b150da2b365ea96569b9ef580dce7677b45df3546936b82cb677765cf48f4e230f128d0d7918ba5d3789b1396c3050099bbec64b26af
SSDEEP

12288:pxzmJg5lSKRsd50cAFILB1J1BXBOIC44w01Wnn7DZYytB1ia63:+ESysd50cYIV/1dBOICPl8nn7FYygT3

Score

N/A

Malware Config

Signatures

Files

fc399f2d331771ab2c33f79ce8faa8d1268277c4c1c2331a4aa3e86f68dcfc4c
.exe windows x86

4772a282eb6dc8978bceeba4e9b5c767

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateHandle
GetCurrentThreadId
GetVersionExA
GetSystemDirectoryA
TlsSetValue
WriteFile
QueryPerformanceCounter
ReadFile
lstrcmpA
SetFilePointer
GetCurrentProcessId
GetVersion
LCMapStringW
LoadLibraryA
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA

Sections

.text
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 635KB - Virtual size: 634KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ