38f19c5732542781f9ba6f6741d5ab8fe2a7a1d9672de5a241529b6697fc1333 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38f19c5732542781f9ba6f6741d5ab8fe2a7a1d9672de5a241529b6697fc1333
Size

75KB
MD5

3e6342bf287d6b11d8eb357967319698
SHA1

890ad56dcba1ae4b2d6cd9a3273f1e88ec2e24b6
SHA256

38f19c5732542781f9ba6f6741d5ab8fe2a7a1d9672de5a241529b6697fc1333
SHA512

b9e29faa772c280364b5638a48753e93da29409fed527a651de26b36402ec828f28de5fc463d43bc5dc44bcb2e8489170a33dcc6dbfe33820a70dde8baa90dfd
SSDEEP

1536:Mj8d05HjiifOBqvUlEhHJ3t4yhOUvwrOSUN9PXKQJBV3L+lfDTw:Mj8d0ZiifO+hHJ3JhOUvwrhUN9Pa4Bkw

Score

N/A

Malware Config

Signatures

Files

38f19c5732542781f9ba6f6741d5ab8fe2a7a1d9672de5a241529b6697fc1333
.exe windows x86

8d1f3607f6f644aa45436b6badedcfb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
VirtualAllocEx
VirtualFree
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE