482b240e099db42054135574554437bce9e917808273a54f70355419c4b9739b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

482b240e099db42054135574554437bce9e917808273a54f70355419c4b9739b
Size

2.2MB
MD5

747ac75511a06ebaa1cb320ec27a81a6
SHA1

62e580e9eefe85d7c41fbc939888cda32f47f6ec
SHA256

482b240e099db42054135574554437bce9e917808273a54f70355419c4b9739b
SHA512

b893e5575e75d72563d7f7071db9805ee0753fb390aa505f846261cfe519ef7f44abe1418c127d4a387c399beaa2b169a06c30c54c38bde2e609f8bf26b8c643
SSDEEP

49152:ZEchLW+z6SexqyzKx3PcptrlB+yvpzZYhTlzDWCYStrprVtU9x0:FFW06SexqQKx/cptr7+yBzZYFlHWChtt

Score

N/A

Malware Config

Signatures

Files

482b240e099db42054135574554437bce9e917808273a54f70355419c4b9739b
.exe windows x86

09f82f0de942495e8a60ea74bdaa4595

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
SleepEx
Sleep
WaitForSingleObject
VirtualAllocEx
VirtualProtectEx
FindResourceA
GetDriveTypeA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
GetOEMCP
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetLastError
CloseHandle
ReadFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
WriteFile
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetStringTypeW

user32

GetMessageA
DispatchMessageA

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ