a7f2b33409c70538d94779da9378348764407153db5ab0accad2e9bff5e65409 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7f2b33409c70538d94779da9378348764407153db5ab0accad2e9bff5e65409
Size

112KB
MD5

36d8ed3abb0ea868317e71da8f6ca013
SHA1

6f96a2c435532f6d152b3904d4cfd204b0a6072c
SHA256

a7f2b33409c70538d94779da9378348764407153db5ab0accad2e9bff5e65409
SHA512

b9dbdeed6104c6998126e46475dc4efe6c14e7104c1b8cc14afcb370185675f4551680fb4fa4ef4f77fb0283c165d686c50e4d86873a07c7d0bb10843e1433bd
SSDEEP

3072:kMzx1liU2ShJkrrLJkxA8lFfjRn4o2gbglOisMgP5ry:kMzxyDAKvJkxNn7uo2KGOVMiVy

Score

N/A

Malware Config

Signatures

Files

a7f2b33409c70538d94779da9378348764407153db5ab0accad2e9bff5e65409
.exe windows x86

6c59af647217e242561164612c866078

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentProcess
VirtualAllocEx
WriteProcessMemory
LoadLibraryA
GetLastError
GetLocalTime
GetProcAddress
VirtualProtectEx
VirtualProtect
CreateThread
FindResourceA
LoadResource
LockResource
SizeofResource
GetModuleHandleA
WaitForSingleObject
GetCommandLineA
GetStartupInfoA

msvcrt

__set_app_type
_controlfp
exit
strstr

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ