7f3797985458197059b0fa7fb97d4613c34c339de4a5b854aca5e6c2b93ec3dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f3797985458197059b0fa7fb97d4613c34c339de4a5b854aca5e6c2b93ec3dc
Size

172KB
MD5

d3489ab4f50196b4d5601168631f1792
SHA1

90e4dd6a3afc78a48d350de5cb372e7cc2d0624b
SHA256

7f3797985458197059b0fa7fb97d4613c34c339de4a5b854aca5e6c2b93ec3dc
SHA512

75e5a12a1e0217678477dd1b6c620c9de1831e10c578786af4bd667318dacb35d8db0c2486a2e90e75679394f7f16befea319794bccf006376dd2adcffde18d4
SSDEEP

1536:f9GvcnNcnGHagWcXOyKAh+ICWKVzwgoW3b34XdXv7t3KNV2u/tHPuov05+GDwI+i:fUctPKRoWLY91KNV/th0IWwxPjTDmTd

Score

N/A

Malware Config

Signatures

Files

7f3797985458197059b0fa7fb97d4613c34c339de4a5b854aca5e6c2b93ec3dc
.exe windows x86

28aac8e6d8b7fc104465b2f9ce13db95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FindResourceA
GetProcAddress
GetThreadContext
Sleep
SetStdHandle
ReadFile
SetFilePointer
FlushFileBuffers
GetLastError
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
CloseHandle

user32

GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
PeekMessageA

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ