a16dcb29295e455add2776bf4180b97bc461815d18ba49c4059fdddbc4e83e5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a16dcb29295e455add2776bf4180b97bc461815d18ba49c4059fdddbc4e83e5e
Size

309KB
MD5

e0cf86f7acff8a9fcf3a7df2acd942cb
SHA1

bca39ce409072c250823fd35ba0312f9a38eaa1e
SHA256

a16dcb29295e455add2776bf4180b97bc461815d18ba49c4059fdddbc4e83e5e
SHA512

aca8c51dd3f6d15d277e6921b98fc852ce10f1134cc33e09dd90ec86f9260ef264dd834eac2cded4cd3293b110906f88ef6e5555997e3537e4f6da13f3a68ce5
SSDEEP

6144:xiJRzfQpmbtkv2wOFlfYZs22XRWurpWkjjHvmW3S:oLzCStkv2wpu22XpWk/mQS

Score

N/A

Malware Config

Signatures

Files

a16dcb29295e455add2776bf4180b97bc461815d18ba49c4059fdddbc4e83e5e
.exe windows x86

f7c81fe4d0b5e8390db3b7177d0f34fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStringTypeW
lstrcpyW
WaitForSingleObject
GetExitCodeProcess
LoadLibraryA
InterlockedDecrement
SetEnvironmentVariableA
FindResourceW
GetACP
GetPrivateProfileIntA
WriteFileEx
lstrcmpA
GetCurrentDirectoryA
VirtualAllocEx
GetLongPathNameA
GetModuleHandleW
Heap32First
InterlockedIncrement
GetDiskFreeSpaceW
GetPrivateProfileSectionA
GetDiskFreeSpaceW
GetPrivateProfileIntA

apphelp

AllowPermLayer
ApphelpCheckExe
SdbCreateMsiTransformFile
ApphelpCheckIME

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE