1b71aa0c82b9c9ef4a9d9ad106fed51c1e61526600e9fa07905b5d90989943db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b71aa0c82b9c9ef4a9d9ad106fed51c1e61526600e9fa07905b5d90989943db
Size

83KB
MD5

dfbe58c8436e00b2f03dddd5b5998ae1
SHA1

c2387dc3875e9baa35d908b58b093dd23679bd72
SHA256

1b71aa0c82b9c9ef4a9d9ad106fed51c1e61526600e9fa07905b5d90989943db
SHA512

4b909b1d7d49889e0cd17c093e4c9b839b2977e1ceb08e200c6e2b6d2aa442a22f745c39815413d2e3675781302b30297ec567a56bb25649daa0953079d1b38f
SSDEEP

1536:YTKvZd5jiAPE4YBaPyOUC6lYx1rJYu/pwjd+Urtuac7:YTKvpj24+aPyOUXlYiua3uP

Score

N/A

Malware Config

Signatures

Files

1b71aa0c82b9c9ef4a9d9ad106fed51c1e61526600e9fa07905b5d90989943db
.exe windows x86

8403e6d0a5ba365b39b2cd8c8879d3e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
TlsAlloc
LoadLibraryA
GetProcAddress
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetCommandLineA
RaiseException
DecodePointer
EncodePointer
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
MoveFileA
GlobalWire
HeapAlloc
GetProcessHeap
HeapFree

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ