da343105ff71a65cc38a1635b5cd3a4e9c64bf6eff7ad5798c02c9860fe56e22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da343105ff71a65cc38a1635b5cd3a4e9c64bf6eff7ad5798c02c9860fe56e22
Size

20.0MB
MD5

d9c94d8b8f1d049acfd073b4dec568fc
SHA1

cd0e7f26d0604be021991876ec2b69e627b05a96
SHA256

da343105ff71a65cc38a1635b5cd3a4e9c64bf6eff7ad5798c02c9860fe56e22
SHA512

506a41dfb2b8b9c65f8568703aef27bc947a6af1203ab501fceb595367d855e2537f9c9d7762e5af91e8d9d7c3b15ffba086fbf2df12a605bf48ff9efa4cfd22
SSDEEP

393216:+imdhqnnXC8/dnlgH0QKp3oyn58/552BtaaGmYFKzboUzVmfFEV/J:+imdhqny8/dmH0QKp3oyn58RMjaMYobP

Score

N/A

Malware Config

Signatures

Files

da343105ff71a65cc38a1635b5cd3a4e9c64bf6eff7ad5798c02c9860fe56e22
.exe windows x86

cf4a8052e3b0c7d79763014bc1661884

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
FindResourceA
WaitForSingleObject
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
ReadFile
IsBadCodePtr
IsBadReadPtr
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP

user32

PeekMessageA
GetDesktopWindow
GetWindowRect

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ