d2104ac1a641833c23eb53dcb941a513c1caf40348bfbb1f3ece073e658abe09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2104ac1a641833c23eb53dcb941a513c1caf40348bfbb1f3ece073e658abe09
Size

18.5MB
MD5

e62a396a0536a488193c5a2d6dc06079
SHA1

1483e77d7840853cffb77da3d8c2f25aa41026a8
SHA256

d2104ac1a641833c23eb53dcb941a513c1caf40348bfbb1f3ece073e658abe09
SHA512

cad5fd5fddb8c7f1c9ad55f808ffe5b520e3a2e9d8bff956971ed62214735b06cec973c592562fdb99ebf687f1afaeaeffb82b5dd0ffbda5441cbb5d81562d66
SSDEEP

393216:zGcQErz4Y3G7IysDZrFRmovgn3bykWZAHJHM1KXcJDrA5NGJif5Q:6xErz40ZrFoov4LFWqpnsJDrA5F5Q

Score

N/A

Malware Config

Signatures

Files

d2104ac1a641833c23eb53dcb941a513c1caf40348bfbb1f3ece073e658abe09
.exe windows x86

527d060ab758e51cfb3e9a93caccb953

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetLastError
GetProcAddress
FindResourceA
WaitForSingleObject
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
GetStringTypeW

user32

PeekMessageA

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ