af734cef8abd0f28ae17ae62457ec5e2319dab527f9511ca19371752b58e6cb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af734cef8abd0f28ae17ae62457ec5e2319dab527f9511ca19371752b58e6cb8
Size

149KB
MD5

120151b42b897e704404618e9f2fa13f
SHA1

3c2930f452d3e2454db6b5404382dcc4896ca1d8
SHA256

af734cef8abd0f28ae17ae62457ec5e2319dab527f9511ca19371752b58e6cb8
SHA512

f342278d34952037cf978addfe5fef6cd9d7558a3b1856f92f552815fc36b713db9025368ba95b62255099a1c307268287c2a392641109dd2f43f0f45d34b51d
SSDEEP

3072:Y4j3vp+bjVBEqZx8iAXGUg9YUJ4c7xWsE0pRI3y1cCUCUomn:cFx8hXGlONc91p+3ylmn

Score

N/A

Malware Config

Signatures

Files

af734cef8abd0f28ae17ae62457ec5e2319dab527f9511ca19371752b58e6cb8
.exe windows x86

deb2bc220a6123f5e4471a5b1168d625

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushConsoleInputBuffer
GetCPInfoExW
CallNamedPipeA
TlsGetValue
CopyFileW
GetModuleHandleA
GetLocaleInfoA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetStringTypeW

user32

EnumDesktopWindows
DrawAnimatedRects
IsWindowEnabled

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE