fbf147dcbdd9d3ff8ebe0ef468c9ef7c01244adf02cde896be3ad777bbc82851 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbf147dcbdd9d3ff8ebe0ef468c9ef7c01244adf02cde896be3ad777bbc82851
Size

122KB
MD5

51463f95114308c772228f26ab1c6a21
SHA1

e8212f0d3bda7a59de6a80a35360274148efc60f
SHA256

fbf147dcbdd9d3ff8ebe0ef468c9ef7c01244adf02cde896be3ad777bbc82851
SHA512

79ad1e62404bfbd866e2d54ff3e38564e4bb9e31d956c0382297aa1f686d5bdea6f4e3b6df0c5763bf1f2e664e5f2ef529247e6ff4d12a4c4c981ea3ed8a84d6
SSDEEP

3072:6ebsMApd1ns+tBxy6BEXqkFoYg0MXO7al5Q:5bLssWx/BE3Ng0MeI

Score

N/A

Malware Config

Signatures

Files

fbf147dcbdd9d3ff8ebe0ef468c9ef7c01244adf02cde896be3ad777bbc82851
.exe windows x86

59ba91a95d7524a075d0ed5ac3820a0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
VirtualProtectEx
GetCommandLineA
GetModuleFileNameA
GetProcessHeap
LCMapStringA
GetCommandLineW
GetStringTypeW
DeleteFileA
GetStdHandle
GetProcAddress
LocalFileTimeToFileTime
GetModuleHandleW
GetPrivateProfileStringA

msvcrt

calloc
_controlfp
__p__commode
_XcptFilter
_adjust_fdiv
__getmainargs
_initterm
__set_app_type
__p__fmode
_except_handler3
free
_exit
__setusermatherr
__p___initenv

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ