591e7bd8cb4642751c426efcde0dcb39c1d115ef295fbfa8e59dcd8dfc2db055 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

591e7bd8cb4642751c426efcde0dcb39c1d115ef295fbfa8e59dcd8dfc2db055
Size

12.4MB
MD5

7d601e4353dd55cdcfb003415c263fc0
SHA1

69981d42174213bc9bee667f05f2bcc3d5bc47ae
SHA256

591e7bd8cb4642751c426efcde0dcb39c1d115ef295fbfa8e59dcd8dfc2db055
SHA512

e2f6d62e7d5c1cdebe7926896e44d960bff07a6bffc9fd2700626592e30f8c9a0613a02726a71f9992c10a0d4489ace26555941f65f1a14a39e0efdc9e4df173
SSDEEP

196608:8imdhqnnOM+9gytKWrk68ECnBG1UWZAH/Cw2nEUAxx7pBMoYvK7e:8imdhqnnX+tKD60Bo/Zy/Cw2Cn6vKa

Score

N/A

Malware Config

Signatures

Files

591e7bd8cb4642751c426efcde0dcb39c1d115ef295fbfa8e59dcd8dfc2db055
.exe windows x86

3525a20d57c512765c45d5be90fb5472

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FindResourceA
GetProcAddress
Sleep
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapFree
RaiseException
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
FlushFileBuffers
SetStdHandle
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ