f8ea4eba859c22746b477ce74cf172614dfc7ae72b4738005640617fc2256d25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8ea4eba859c22746b477ce74cf172614dfc7ae72b4738005640617fc2256d25
Size

24KB
MD5

19f3f1a6e673a54150e49bbc55c844dc
SHA1

47343ffbe92769fb4951f21e922cce70773d3e61
SHA256

f8ea4eba859c22746b477ce74cf172614dfc7ae72b4738005640617fc2256d25
SHA512

cf14ac4013138a23332dd46f6fdd6af5f24ac25aa7c91370aa40681a6d1a69c1fb1eff8dfff72cb77d58acb45866fa349881de18fcb015aad787d76d72fbfaf4
SSDEEP

384:zXqaxT6QpXCt1QMMMMMMMMMMMN88888Qbyczx9M:TR1py1QMMMMMMMMMMMN88888Qesx9M

Score

N/A

Malware Config

Signatures

Files

f8ea4eba859c22746b477ce74cf172614dfc7ae72b4738005640617fc2256d25
.exe windows x86

f6883c941fef2d709210a3d88c7ad956

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
CloseHandle

msvcrt

__getmainargs
__set_app_type
__p__commode
wcschr
_controlfp
__CxxFrameHandler
__setusermatherr
_except_handler3
wcstoul
_XcptFilter
_adjust_fdiv
_c_exit
memmove
__p__fmode
_exit

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 999B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ