a5a9b8fea403043ec701d3c888d4aa0700b216447008f2514296e6cb8434f91c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5a9b8fea403043ec701d3c888d4aa0700b216447008f2514296e6cb8434f91c
Size

746KB
MD5

18d811945512416dbf3e01430881beb0
SHA1

7db83438f2429ab0a32152c67f5055b7d434e1eb
SHA256

a5a9b8fea403043ec701d3c888d4aa0700b216447008f2514296e6cb8434f91c
SHA512

1e87c5251556ea1aa28736520ccc5840b96cc2d6ca78c879fe70808c911bdb1ff8e6052135ac2a4c5f020d49998ce821a11e96304524cc17c1bbc2cb795c464d
SSDEEP

6144:Q6viUNIPcmmmRm4EG76adSNc/B9XgGJ2Fc+y6xL:QtEmREGO8oc/B9Q1xL

Score

N/A

Malware Config

Signatures

Files

a5a9b8fea403043ec701d3c888d4aa0700b216447008f2514296e6cb8434f91c
.exe windows x86

2ce5fa71bd591bb9a5017e9021b967bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetStartupInfoA
CreateDirectoryA
GetWindowsDirectoryA
FreeResource
SizeofResource
LoadResource
Sleep
GetCurrentDirectoryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
ReadFile
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
GetLastError
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
GetStringTypeW

user32

GetInputState
PostMessageA
GetMessageA
wsprintfA

Sections

.text
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE