f044ef834c8575a893363e146986e9bd31717bc8f5dff1cee97989f4134eafec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f044ef834c8575a893363e146986e9bd31717bc8f5dff1cee97989f4134eafec
Size

180KB
MD5

64d1a3915b0846c0350c9eb1bacc9880
SHA1

7584e553e31e585c4fc29394e4b7bfab89248aac
SHA256

f044ef834c8575a893363e146986e9bd31717bc8f5dff1cee97989f4134eafec
SHA512

c7157f20072c41bc4dc154051dd9d22cb0a91ac0c83b9fa635bd57e6e2de71c0e1e4f298782a8f5a8da7b8783ba02fe4fd3153ca606b57b33f94f0a4e60c244a
SSDEEP

3072:XK92Pz+XxH2O+v19ajwJJ/5fVZQwlXg62ttQte+aJe1mgawzxsBub86vRkRkRkRG:XK92il8OMKUVTV5nveeeeeeeeeLTV5n0

Score

N/A

Malware Config

Signatures

Files

f044ef834c8575a893363e146986e9bd31717bc8f5dff1cee97989f4134eafec
.exe windows x86

b91b0b82085a9d1034137891a762f721

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
LockResource
GlobalAlloc
GetTickCount
EndUpdateResourceA
Sleep
lstrcpyA
GetModuleHandleA
GetStartupInfoA

msvcrt

srand
??2@YAPAXI@Z
??3@YAXPAX@Z
strstr
rename
rand
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
__dllonexit
_mkdir

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ