c3374c305b127fcaab3755b1016fae7fe7488b1c51799467f756c811df3c1508 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3374c305b127fcaab3755b1016fae7fe7488b1c51799467f756c811df3c1508
Size

4.5MB
MD5

c8d34b5402b2e950965743d645d46be8
SHA1

43bf7c1f3b8cbaf0e3dccf09ca4f1e590fc33f26
SHA256

c3374c305b127fcaab3755b1016fae7fe7488b1c51799467f756c811df3c1508
SHA512

9fd5393e3517f677b1bae980debfa5a59ed63f446a0b7268a21556bd7d48a40e038f0aa181dbf1cb069bf0063af905403f0df6fcfbdd8560f6e182be942afaf3
SSDEEP

49152:7t6cwHAeB7a/ZT+S0t6cwHAeB7a/ZT+S0t6cwHAeB7a/ZT+SrQimdhqn6H74ra1p:gimdhqnA4OM4UyZj/r

Score

N/A

Malware Config

Signatures

Files

c3374c305b127fcaab3755b1016fae7fe7488b1c51799467f756c811df3c1508
.exe windows x86

ddab40e7afc8d305f4d1f51f87c0467b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
LoadLibraryA
FindResourceA
GetProcAddress
Sleep
CloseHandle
LCMapStringW
LCMapStringA
SetFilePointer
FlushFileBuffers
ReadFile
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
GetLastError
SetStdHandle

user32

GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
PeekMessageA

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ