e3177b580bb86b6d28b6fde37cd73268ed6cad5a0c6cb59cb689af6d390d5a88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e3177b580bb86b6d28b6fde37cd73268ed6cad5a0c6cb59cb689af6d390d5a88
Size

16KB
MD5

813b65e4c992e60d496081018a5e09d6
SHA1

32c372d1248c0cc935c280a849cc358fb51b9677
SHA256

e3177b580bb86b6d28b6fde37cd73268ed6cad5a0c6cb59cb689af6d390d5a88
SHA512

693a9c425312da66b7bc236fa88a9525fc65b4ebd3a15aa6a7705985ba1308d710ecb9fe943ebda7b852673a9155ad3e7b1253816bce98a12836cb33ccbb7755
SSDEEP

48:aqg1PtKJTyNHOmyJ9LGllTudx/qGCfA8HaAepI+/UfkNoyl15mfAGHAKe3Ez:M1w9rr3BXCOAOI7fkNoynYTHKC

Score

N/A

Malware Config

Signatures

Files

e3177b580bb86b6d28b6fde37cd73268ed6cad5a0c6cb59cb689af6d390d5a88
.exe windows x86

f7466b0792a01cf4643e17820c59a009

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p___initenv
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
strncmp
printf
malloc
exit
strchr
strncpy
tolower
__p__fmode
toupper

kernel32

DeleteFileA
CreateFileA
GetFileSize
CloseHandle
ReadFile
GetCommandLineA
WinExec
CreateProcessA
WaitForSingleObject
CopyFileA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE