a8be789ab2bbd93228178e06da4213544f7fc998c4c727b22510539891ffe5f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8be789ab2bbd93228178e06da4213544f7fc998c4c727b22510539891ffe5f1
Size

44KB
MD5

6514c76e4ffe05f6b2c6b7e7d599d73b
SHA1

fa36760e9b4f964135e3db71ac6db72a2ba0313e
SHA256

a8be789ab2bbd93228178e06da4213544f7fc998c4c727b22510539891ffe5f1
SHA512

439221e52eed112f13fd481942032ffe4bb246257e1d8d368b7d64ca50675792425853e0f1de7d5d1a82926aabcfef546d0966e583619c97d9f1f3959e597937
SSDEEP

768:JOe8lyiAGA+upolD0vvAXPJPvEuOSx7DPeI:0e8llAJol4wXRPvEn

Score

N/A

Malware Config

Signatures

Files

a8be789ab2bbd93228178e06da4213544f7fc998c4c727b22510539891ffe5f1
.exe windows x86

0452c307d7d53d56d89cf689c757c1a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GetModuleHandleA
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetComputerNameA
GetVolumeInformationA
GetSystemDirectoryA
GetProcAddress
ExitProcess
ExitThread
CloseHandle
TerminateProcess
OpenProcess
RaiseException
LoadLibraryA
CreateFileA
GetCommandLineA
GetVersion
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ