540fac86fd6f07127829097bf18461242a32b10d51ef3e373f54db485e89868e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

540fac86fd6f07127829097bf18461242a32b10d51ef3e373f54db485e89868e
Size

76KB
MD5

8642a0f2e4f2b2c6a2f9b3a8e2ac1db0
SHA1

6a437fc3e000658f2e1b057bfb3972469ec070b1
SHA256

540fac86fd6f07127829097bf18461242a32b10d51ef3e373f54db485e89868e
SHA512

ad660ccdb689a8d0112247d2fa36cb73ad1510e08cd41aca6df52a02671bb291b8cd9f95249caeba1470715e4c55de4ac6de9362cc3cb4c2af929c785e2025a2
SSDEEP

1536:UIpjxOMeFw9FvZvyGhpNy3itfFu+Kr6dEJqJtmD:ROMeFw9Djhp9Ubayq4

Score

N/A

Malware Config

Signatures

Files

540fac86fd6f07127829097bf18461242a32b10d51ef3e373f54db485e89868e
.exe windows x86

f23c080a85c6bd0f034778e38a3436cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr80

__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__p__commode
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
__dllonexit

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ