95d6212427d900b4b68e16fa81afb759903d47c82aa2c859e637c7dab957589a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95d6212427d900b4b68e16fa81afb759903d47c82aa2c859e637c7dab957589a
Size

16KB
MD5

7a8d6c611e705d4836cbe2d5cc3acb44
SHA1

323493219ebfed680c381a02ece4696c3e1c92e3
SHA256

95d6212427d900b4b68e16fa81afb759903d47c82aa2c859e637c7dab957589a
SHA512

061ebb95ff885c02394e542af51ddcc8c250aa70570774e9c3a39c4bd72fbe1b92636e505c0db61b64a22861b0fe676f6af4faf936e7c39e060d76ce85e93cea
SSDEEP

192:i0H0G6wU1cpsJyV7SM4o4feeEEZpaHDWLN/Ja1xFjWsJ3DTBYDUkb81X:iqxjU1ct7TweUpG0IFas1oy

Score

N/A

Malware Config

Signatures

Files

95d6212427d900b4b68e16fa81afb759903d47c82aa2c859e637c7dab957589a
.exe windows x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ