af9ae0b4968343e1f34cde8beddcb43e986d64d5bf8694aef15b22d63b72afa5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af9ae0b4968343e1f34cde8beddcb43e986d64d5bf8694aef15b22d63b72afa5
Size

716KB
MD5

7b8a84139d6a1e1dfe9b25b971efd5e9
SHA1

11c69e2eaf7dbeb284046db2456462d6563e62c8
SHA256

af9ae0b4968343e1f34cde8beddcb43e986d64d5bf8694aef15b22d63b72afa5
SHA512

cd7c490e1eccddf611cf2ea6687598616ead9e8a8e06f8078be1ed406fc3cf6f2285afb3ac6db100dd17d95cbbf4d66861ffbde8a0836cd834733b6c1d315fa0
SSDEEP

3072:GuxBoJOMXzAMrTuw8aMBe8+K/p7ZwtD6:GK8zAazxQp1wl6

Score

N/A

Malware Config

Signatures

Files

af9ae0b4968343e1f34cde8beddcb43e986d64d5bf8694aef15b22d63b72afa5
.exe windows x86

e9503171752bc22c720554da794d380b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
CreateFileA
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ