7886a20796504f16d1b8535623b16d209a16c96a1e78533123ab859f2dc9ed69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7886a20796504f16d1b8535623b16d209a16c96a1e78533123ab859f2dc9ed69
Size

13.5MB
MD5

2d15dab31500e31fdff612ad7ad12c54
SHA1

b7f60f56d792579ce361c9c0fd90becc7bab8c69
SHA256

7886a20796504f16d1b8535623b16d209a16c96a1e78533123ab859f2dc9ed69
SHA512

84e9c4ef4b7ffc15c3e1fc03f7447acc27f7e686cb53ca59f1337ca18c824036a7b4d7d9950d6df935e28aaa648f1d9972b0237032b594f48994b71434d8f1ca
SSDEEP

393216:nimdhqnVJn/tPIHoAzLTISxZvXxz5JqFS0Wb4YwN:nimdhqV9/tPC1TIsZvXx1JqFXN

Score

N/A

Malware Config

Signatures

Files

7886a20796504f16d1b8535623b16d209a16c96a1e78533123ab859f2dc9ed69
.exe windows x86

5a4f57a5d80f726a223ae437cd3254cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetAtomNameA
GetProcAddress
WaitForSingleObject
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

GetDesktopWindow
PeekMessageA
GetActiveWindow

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ