d97b93e29e56459a8ffd281b2afda52115d0eb421f61ee7c8ffa48623e30b08c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d97b93e29e56459a8ffd281b2afda52115d0eb421f61ee7c8ffa48623e30b08c
Size

75KB
MD5

1cf6029d85a3591ebb6b4965b9a1b18e
SHA1

22930a7e76e68c41af22f8e7a86c9a7f633b1383
SHA256

d97b93e29e56459a8ffd281b2afda52115d0eb421f61ee7c8ffa48623e30b08c
SHA512

76e2be80a0e2a8bd1f7ae86d61ba29a97e5b62b6f8e38262786456cb1be793013c3bd25e48f3dc39384e420afd41c12f3945757cd3d280d1d9da16af65ba6476
SSDEEP

1536:sj8d0gHjiifOBqvUlEhHJadNEGm6DjIAJBV3L+lfDTw:sj8d0SiifO+hHJaDEGm6ooBkw

Score

N/A

Malware Config

Signatures

Files

d97b93e29e56459a8ffd281b2afda52115d0eb421f61ee7c8ffa48623e30b08c
.exe windows x86

8d1f3607f6f644aa45436b6badedcfb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
VirtualAllocEx
VirtualFree
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE