816b7cae45a0fa8431dc78ef95209947367e9271de031a9f00cd27a1ec18deb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

816b7cae45a0fa8431dc78ef95209947367e9271de031a9f00cd27a1ec18deb0
Size

168KB
MD5

34c4a64f0dfe7ee75428bc2fff6c0c58
SHA1

1f76390b9e21e6cb823b6449017deaae4da27e41
SHA256

816b7cae45a0fa8431dc78ef95209947367e9271de031a9f00cd27a1ec18deb0
SHA512

ea6ad3f83f357c1c21e37dc411f9a3500ddf1fd3d6ccc68dcbe45db5672c67a3c306ccd4fef693f99603b7c1a05df37392f04c659793076d8c1aebd206521842
SSDEEP

3072:T29Af+lI3KyNIY9CFhl3T6bL5WrMSijhy6dkXlczXSyMJc9XYr:TWE6yNZgFhlD6bLKMSgs6pz2c9or

Score

N/A

Malware Config

Signatures

Files

816b7cae45a0fa8431dc78ef95209947367e9271de031a9f00cd27a1ec18deb0
.exe windows x86

7f90c480feccf90d2b6e0737351f50d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
GetCommandLineA
LCMapStringA
MultiByteToWideChar
HeapAlloc
TlsAlloc
LCMapStringW
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetStringTypeW

user32

LoadCursorFromFileA
ScreenToClient
ShowCursor

gdi32

CancelDC
SetPixel
CombineTransform

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ