f4b590176f27a6d75526916fd6f2ae94c82a41fb772b97c16e31cae75fed0a2e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4b590176f27a6d75526916fd6f2ae94c82a41fb772b97c16e31cae75fed0a2e
Size

10KB
MD5

2874b9c065540b619ed404c7bba1e7f9
SHA1

b6dfaabf7b795eb76fe5afc5accb6c87906cd99e
SHA256

f4b590176f27a6d75526916fd6f2ae94c82a41fb772b97c16e31cae75fed0a2e
SHA512

6cc9322a696b46137362ff7543fc3315dd354f0471a5803efbc5a4d14e62e03c2c06d5db29b61122f994f60ade8e498e3e49c524190f4e068d8d2a0e1213fa6a
SSDEEP

192:rvZFpvxjHFs/rJp01FgjHrCTjTRQyhceHpOd+SDNdZg7bcNgGEU:rvDpvxjHFs/z8yCTjTRrJpOd98FGEU

Score

N/A

Malware Config

Signatures

Files

f4b590176f27a6d75526916fd6f2ae94c82a41fb772b97c16e31cae75fed0a2e
.exe windows x86

be55fd0220ca5cb2694346eec61aa784

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FindResourceA
LoadResource
LockResource
SizeofResource
VirtualAlloc
GetModuleHandleA
GetProcAddress
WaitForSingleObject
VirtualAllocEx
WriteProcessMemory
LoadLibraryA
VirtualProtect
GetCurrentProcess
CreateThread
GetCommandLineA
GetStartupInfoA

msvcrt

__set_app_type
_controlfp
exit
strstr

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ