891cb379cb4e8b881b8691909bd32e1e11b930c8d3c9b36896ef481766582c5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

891cb379cb4e8b881b8691909bd32e1e11b930c8d3c9b36896ef481766582c5f
Size

26KB
MD5

3d758d853bf5f02150482587bd2731da
SHA1

2e31fa128e2068c6974f4302059f18e3e06f3c3b
SHA256

891cb379cb4e8b881b8691909bd32e1e11b930c8d3c9b36896ef481766582c5f
SHA512

a80c652d467516054a7a64e7d9728c0ae75000e598180266ec9b96a35601befe92f69f4b32c961a02b3a23ce26e49c13549a66b38dff5f47d32f8dce4d28e21b
SSDEEP

768:Wk79PjkNj7Ruo7OFTM/zTj90J/cgd4yy/l4thcnGDTVf:Wk79Pj0uo7WTM/XyZcgdTy/lASGD5

Score

N/A

Malware Config

Signatures

Files

891cb379cb4e8b881b8691909bd32e1e11b930c8d3c9b36896ef481766582c5f
.exe windows x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 19KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 448B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ