cf57717bcd9a2090b46c63607dc1b0ac0f39f9b1aeca557c8507ecdb61f83216 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf57717bcd9a2090b46c63607dc1b0ac0f39f9b1aeca557c8507ecdb61f83216
Size

142KB
MD5

3425126e0312f826d066bde298128889
SHA1

ca2ef6f6d80717ea72e85187cc8f8d5687fe5c0b
SHA256

cf57717bcd9a2090b46c63607dc1b0ac0f39f9b1aeca557c8507ecdb61f83216
SHA512

ef67ad02598e9d2a74e83f9c12f472072e57c856e1f8432e024b7f7c9d71ffe95cc5c0b9fb0d667ce3bf0fd20a1d1262a516ba44a1fa0e4cddc08f2fa2295ea7
SSDEEP

3072:o77/KSRNddvzL+nlAuRDDWTqRJ80EbYspbx7nJYfe95ZgGZiCJW9GpfCdO3qunDu:caQbpnJh95WGwCbpR3quRw

Score

N/A

Malware Config

Signatures

Files

cf57717bcd9a2090b46c63607dc1b0ac0f39f9b1aeca557c8507ecdb61f83216
.exe windows x86

de6c7cb6a3205debfc6ae490248ff623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
QueryPerformanceCounter
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE