dc8221256dd7e280f5eb961a79a86b70b72e0dc4bdba5eb1e38702f7e1b0140d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc8221256dd7e280f5eb961a79a86b70b72e0dc4bdba5eb1e38702f7e1b0140d
Size

20.0MB
MD5

fe9e29ede4845613a4d2de2353830ffc
SHA1

16798bb031f9ce6ab39ee0068ceffaec94f8a000
SHA256

dc8221256dd7e280f5eb961a79a86b70b72e0dc4bdba5eb1e38702f7e1b0140d
SHA512

e1c5ac09e900adbbf7b2da4ff66898550aab7c1c24a1825b7924bb28ba1bf3ca2ab2b2a9a26ea42b85b951cd0d342f06eabfc0e9e41e2c66ba36c37331633420
SSDEEP

393216:RimdhqnF8Mk/DQU7EU83YoYoxzIMizeevdOy0u7zr7veOPBynkW:RimdhqKMkbQo9OxkeBuPr7ve08

Score

N/A

Malware Config

Signatures

Files

dc8221256dd7e280f5eb961a79a86b70b72e0dc4bdba5eb1e38702f7e1b0140d
.exe windows x86

672a969ce0c12cd53633a53c650807df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
WaitForSingleObject
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

GetDesktopWindow
PeekMessageA
AnyPopup

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ