8986d332bed5e2f34d90358b2f96afd48d33827046d7aa60edec2ef65cb5c6fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8986d332bed5e2f34d90358b2f96afd48d33827046d7aa60edec2ef65cb5c6fd
Size

110KB
MD5

33d3746b6e3a35da88a2359415772b2c
SHA1

8ef34a1a5bcc65f2670a1b2e6a14985949956d2f
SHA256

8986d332bed5e2f34d90358b2f96afd48d33827046d7aa60edec2ef65cb5c6fd
SHA512

3ce48029f1326be6b24099e4eb61ad2d2101bb60d59557a25d3c9f60326e78929d9fc88b47ddc4466e9d2473a2b2c93d8e1b343d4f6f33ad9a94a50d2adeb9ae
SSDEEP

3072:JJJJ9Rec0UK9rHRgv8ZhjfMsEWZbk5znnMGVJSvULff:JJNRUre+fMgkjnxisbf

Score

N/A

Malware Config

Signatures

Files

8986d332bed5e2f34d90358b2f96afd48d33827046d7aa60edec2ef65cb5c6fd
.exe windows x86

0471b517a69cfe60bf6c801da656543d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualAlloc
GetCurrentProcess
WriteProcessMemory
LoadLibraryA
GetProcAddress
VirtualProtect
GetProcessHeap
HeapAlloc
VirtualProtectEx
CreateThread
FindResourceA
LoadResource
LockResource
SizeofResource
VirtualAllocEx
GetModuleHandleA
WaitForSingleObjectEx
GetCommandLineA
GetStartupInfoA

msvcrt

rand
__set_app_type
_controlfp
exit
strstr

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ