d25924c1d85865a46fc38789e09af903acb6d5991aaa57d427e08cc83044a362 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d25924c1d85865a46fc38789e09af903acb6d5991aaa57d427e08cc83044a362
Size

228KB
MD5

ff15a5b1874c5311bb65370e4d99f3be
SHA1

b2441673e932fe2c0bcf614ec18ac4c9f87724dc
SHA256

d25924c1d85865a46fc38789e09af903acb6d5991aaa57d427e08cc83044a362
SHA512

b658a7d83410e414c6cf3e0fcc39c3707d30e128247cee8cca70de96c2de0e30a807b581ecb6a879e510990b8f9d86a6cdfeda19cbb18afd64476ed1ccf17f39
SSDEEP

3072:qVtSeLp+jzEIEmGKodzpPhHL/PfARK7wgGgmN10/YgmCFzdzyWTerziY:peLc9EJKod91/PfAxD91kFBTTGp

Score

N/A

Malware Config

Signatures

Files

d25924c1d85865a46fc38789e09af903acb6d5991aaa57d427e08cc83044a362
.exe windows x86

d73a10e5c7fe3f40cc31bcbfb4ad0b8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeW

user32

OpenDesktopA
SetThreadDesktop
CloseDesktop
PostMessageA
GetThreadDesktop

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 192KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE