95d33498fe644392220becd1ba461c0ecc81d1b94e74e20dff6213efe6f850ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95d33498fe644392220becd1ba461c0ecc81d1b94e74e20dff6213efe6f850ed
Size

20KB
MD5

73b5dd4bd9a04b7f4791ea9c23e6bcec
SHA1

b9a22043bea126dcdf6eae00f1c0615d4def7a06
SHA256

95d33498fe644392220becd1ba461c0ecc81d1b94e74e20dff6213efe6f850ed
SHA512

939682c6546ffae95fd390ef7341298be12cf4ba87dd138525978cd62f8620aeca23eb04237c4f11ea4d33d0f612719976fe97001662cb861dc8b0059039ff51
SSDEEP

384:Eg5dI5UM69OKqfiLiMoDlT3zWnYzL4pGEqBj/xtEBYqrtcnK:MJBfciMoD9mYWGE85tC2K

Score

N/A

Malware Config

Signatures

Files

95d33498fe644392220becd1ba461c0ecc81d1b94e74e20dff6213efe6f850ed
.cab
4.exe
.exe windows x86

6e1f282449492d5fc7a87e6f1c3ced5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 4KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ