dce61361c43fa615c192b8e045f20a34abdec2c3720959427db702b1139b1229 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dce61361c43fa615c192b8e045f20a34abdec2c3720959427db702b1139b1229
Size

20.0MB
MD5

06a23b4ed794cb79743a3ef74d12bb54
SHA1

9b6d8b0002040eefbf8f42eea80e1f338a92f9f8
SHA256

dce61361c43fa615c192b8e045f20a34abdec2c3720959427db702b1139b1229
SHA512

e2b756a9792ee715ffbad2be82948b9f17bb95bf670dd028f33e7dd3899b74b5a6b30fef05e8488d3ffdf5749145d5d8a3d00fb9167c4e991b2b168b197c6adf
SSDEEP

393216:1imdhqn4y8OsV8LdgAG/w1UjXpjmDdzehLU9/Bp:1imdhq4y8Os8JgASw1sUdELiBp

Score

N/A

Malware Config

Signatures

Files

dce61361c43fa615c192b8e045f20a34abdec2c3720959427db702b1139b1229
.exe windows x86

a728f622331acc55085841f158cd2c06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GlobalCompact
GetProcAddress
FindResourceA
WaitForSingleObject
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetStringTypeW

user32

GetSysColor
PeekMessageA

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ