c1266fbb15aa51239eb9fdaea79a3d7a65e4d6a3e1efb4a4c23688c0e6296628 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1266fbb15aa51239eb9fdaea79a3d7a65e4d6a3e1efb4a4c23688c0e6296628
Size

27KB
MD5

a2931897df50e1949b22e79b57aba9b8
SHA1

6ad0dc67456ef9f6ff174229143be5367821a9e2
SHA256

c1266fbb15aa51239eb9fdaea79a3d7a65e4d6a3e1efb4a4c23688c0e6296628
SHA512

6a98a636f0384e90932385c7b549d1886d9e9081216c879ac053e86c87d1a748839f877d510ef2afc83908557b2e1235c85b82a0c752e94a98a8e67818754912
SSDEEP

384:oAPsxKY+YQmE17M0U8924MvzxQxwvZmHbMGobVZM4BH9yeGhchqoDVtRyi6dL3mP:MKY+tF1o0ltHbU24X0hnoD452mdX2H

Score

N/A

Malware Config

Signatures

Files

c1266fbb15aa51239eb9fdaea79a3d7a65e4d6a3e1efb4a4c23688c0e6296628
.exe windows x86

1a86fd45061ddfca0c5b643da84cf20d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetTickCount
lstrcpyA
lstrcatA
GetSystemDirectoryA
ExitThread
Sleep
CreateFileA
lstrcmpiA
Process32Next
Process32First
CreateThread
GetCurrentThread
SetPriorityClass
GetEnvironmentVariableA
GetShortPathNameA
ExitProcess
CreateMutexA
CloseHandle
WriteFile
lstrlenA
GetLocalTime
CopyFileA
GetModuleFileNameA
GetLocaleInfoW
GetModuleHandleA
GetLastError
GetStartupInfoA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary

msvcrt

atoi
strncpy
strcspn
strstr
exit
system
fopen
strncmp
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??2@YAPAXI@Z
_except_handler3
sprintf
printf
rand
malloc
_strcmpi

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ