4a05c43d42ceddae4f3a3c097d57086924bb157d29fdf557a5beb0d72dd46d68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a05c43d42ceddae4f3a3c097d57086924bb157d29fdf557a5beb0d72dd46d68
Size

40KB
MD5

7c01927db7914c9989158866fb431288
SHA1

2c24440f8147dede121cdc48b87903db0bb3e133
SHA256

4a05c43d42ceddae4f3a3c097d57086924bb157d29fdf557a5beb0d72dd46d68
SHA512

00d90722b747c3a0820213aa28312b7aa5bea592b747a9c9611b4adabea95cc307d550a088f30a95f86a41ac6ebb5c224ef0dcbc5a6324d7829a3fc47abdaf5f
SSDEEP

384:fYU4NOpWSCdbKeBlTTm7e9iBejgTDym8RrcwoAz:uNqo4ElNiAjgTDj8pcwo

Score

N/A

Malware Config

Signatures

Files

4a05c43d42ceddae4f3a3c097d57086924bb157d29fdf557a5beb0d72dd46d68
.exe windows x86

88b39d710c582d9bc71fbcc694401214

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleInputA
WriteFile
GetModuleHandleA
DeleteFileA
CloseHandle
WaitForSingleObject
CreateProcessA
CreateFileA
GetTempFileNameA
GetTempPathA
GetCommandLineA
GetStdHandle
GetStringTypeA
LCMapStringW
LCMapStringA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeW

user32

CharToOemA
LoadStringA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ