cd96a56f266410504a704e7ebea6f97cb898878f41097c79b90c2e1be91ae996 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd96a56f266410504a704e7ebea6f97cb898878f41097c79b90c2e1be91ae996
Size

353KB
MD5

3cc806bb74cde9069803e9283a51760b
SHA1

ea89fb1762ab33877266bba28ed527a17cf390cb
SHA256

cd96a56f266410504a704e7ebea6f97cb898878f41097c79b90c2e1be91ae996
SHA512

235a878b5b1028c7c39cc17782d6072a224e93bc831953c0caae31a07cf31cda18925d0a13689e02daa2d14e4c8dcc611ce2ee48fa08e297801a3980c11ea5fd
SSDEEP

6144:qglVP0NwQinfEopV1u1NKL+sfyx2ed1n8DxYczvc0Z5Xi9k8cJE9O4gTl930RV:qgrr8s1u6tq18DxYczjZ9C9nc0V

Score

N/A

Malware Config

Signatures

Files

cd96a56f266410504a704e7ebea6f97cb898878f41097c79b90c2e1be91ae996
.exe windows x86

298925ceb565bf2ffca35498a331328f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetCommandLineA
GetVersion
GetCurrentProcess
DisableThreadLibraryCalls
LocalFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
GetStartupInfoA

msvcrt

_except_handler3
malloc
time
_initterm
free
wcsncpy
_wcsicmp
_CxxThrowException
_callnewh
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_controlfp
localtime
_adjust_fdiv

Sections

.text
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ