f156d5ebd1abf166e040354d0886c02d5d4697551342cf873a48fc46b90e131e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f156d5ebd1abf166e040354d0886c02d5d4697551342cf873a48fc46b90e131e
Size

3KB
MD5

9c9a44c2bbcf8d86f9a74057c11eb7d1
SHA1

bf2d63ee0d460ef5bd2f7b8f49700fce92c5e0ea
SHA256

f156d5ebd1abf166e040354d0886c02d5d4697551342cf873a48fc46b90e131e
SHA512

8585836054082098a672a985f40e6f421cd383f694f5bd42c6f914ebb344c9ceafa76d7d26e5b64a296e2c7bbc978e16d41a3dd6e6b1f32e8e2efcf99fb36679

Score

N/A

Malware Config

Signatures

Files

f156d5ebd1abf166e040354d0886c02d5d4697551342cf873a48fc46b90e131e
.exe windows x86

ae3fbb96f126644d259b4d7f28fa2a1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
CreateWindowExW
GetMessageW
DispatchMessageW
DefWindowProcW
TranslateMessage

kernel32

GlobalFree
lstrlenA
WriteFile
RtlZeroMemory
GlobalAlloc
GetStartupInfoA
GetModuleHandleA
CloseHandle
CreateFileA
CreateProcessA
ExitProcess

ws2_32

WSACleanup
WSAStartup
closesocket
connect
gethostbyname
htons
recv
send
socket

Sections

.text
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ