79aefd900514363f938c762f2d0115da3570d1319a3ff507af1fdd3b0da2427d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79aefd900514363f938c762f2d0115da3570d1319a3ff507af1fdd3b0da2427d
Size

4.8MB
MD5

62c1da2b6770fa5fb288c93c162b30ae
SHA1

1182bd999ea07c31e60e7a9e0548f078d45b592c
SHA256

79aefd900514363f938c762f2d0115da3570d1319a3ff507af1fdd3b0da2427d
SHA512

02d611d98aef8aaa944a7d966344d81c47906ca30ec343d1536e5f9cab94314c083110a75588f1f7b35219717bbbc1ff354d8811a9bab408f6e2930f0b8bb59d
SSDEEP

49152:pVndRrK6QurUTKoC/vXMhQondRrK6QurUTKoC/vXMhQondRrK6QurUTKoC/vXMh0:Q4OMVwO

Score

N/A

Malware Config

Signatures

Files

79aefd900514363f938c762f2d0115da3570d1319a3ff507af1fdd3b0da2427d
.exe windows x86

ddab40e7afc8d305f4d1f51f87c0467b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
LoadLibraryA
FindResourceA
GetProcAddress
Sleep
CloseHandle
LCMapStringW
LCMapStringA
SetFilePointer
FlushFileBuffers
ReadFile
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
GetLastError
SetStdHandle

user32

GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
PeekMessageA

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ