98d0dcab4b9ebca848b8a9b76084dafac777b3d4352088879578bb6c0b6a1246 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98d0dcab4b9ebca848b8a9b76084dafac777b3d4352088879578bb6c0b6a1246
Size

6.7MB
MD5

ba21816dbfb881e92b5c69eb0aecfc1a
SHA1

2129b6e26c1722c6a0b678b1449a99c5dfa87ad7
SHA256

98d0dcab4b9ebca848b8a9b76084dafac777b3d4352088879578bb6c0b6a1246
SHA512

3d7b7a6298344db58ff7646439721c7c87822fdb55f36c979f232473293b398efdac97cbe700d8a76aefe60418fd884d7fe83103fe57e79f6a2fb64d0e35cf42
SSDEEP

98304:kxa+CimdhqnkpdRbRwA7DcdLaYLpgkX1vam84AR8muGRmClyDpfT477FQEh:QAimdhqnKFE+MgOymjA2uR3libW/

Score

N/A

Malware Config

Signatures

Files

98d0dcab4b9ebca848b8a9b76084dafac777b3d4352088879578bb6c0b6a1246
.exe windows x86

5a4f57a5d80f726a223ae437cd3254cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetAtomNameA
GetProcAddress
WaitForSingleObject
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

GetDesktopWindow
PeekMessageA
GetActiveWindow

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ