409e227419a095e9303078d0e0651faadacc6eac5c7cf5ae193817bbc490cc43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

409e227419a095e9303078d0e0651faadacc6eac5c7cf5ae193817bbc490cc43
Size

6KB
MD5

221b476b8e7b422090b6f24d9a7496b3
SHA1

bec229f857641bbdb5b7e292d8879aaaea93a288
SHA256

409e227419a095e9303078d0e0651faadacc6eac5c7cf5ae193817bbc490cc43
SHA512

16e361af03214e6057cbbe6502cc8c96957fc556b7d84c9c1d81b771371ee6f674a65df3506ebf4651a06fef1faf0ffaf1275aa0a716a1a91174970763708211
SSDEEP

96:LbUdhiY/VTnEvbJiTSNh7FPtboynw2rxprySFxv3hoJI:U3fTm/5P1oynwMxbx/+JI

Score

N/A

Malware Config

Signatures

Files

409e227419a095e9303078d0e0651faadacc6eac5c7cf5ae193817bbc490cc43
.exe windows x86

c8b15ae6c3d571e4af46ae54408db83a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord941
ord5353
ord5356
ord5808
ord1075
ord5204
ord3229
ord690
ord389
ord540
ord800
ord922
ord537
ord354
ord5186
ord6385
ord665
ord1979
ord1228

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_EH_prolog
fopen
fseek
fread
__CxxFrameHandler

kernel32

GetTempPathA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
WinExec

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ