82181b64710e9711f2cd20417cbfb01d9652c0d794bab9dc4502f86c704ad184 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82181b64710e9711f2cd20417cbfb01d9652c0d794bab9dc4502f86c704ad184
Size

1.7MB
MD5

31b0fdae795d867ec74c0298b456c6b7
SHA1

a0549772e1f47aefd519c37264aac815c5139441
SHA256

82181b64710e9711f2cd20417cbfb01d9652c0d794bab9dc4502f86c704ad184
SHA512

9ed654d101a3f80ec3c5860ab0b374f2b463dfb948cb5d0766470bb3ae26583d8c1c56b6610348bf57c9dfad96a7fc2a58b146144459e06e6fb162ddd0c03e52
SSDEEP

3072:BbYoFEWXjZ/IlT+WXqW7OLcFO37l0EDY5r:0QNIlCWXqW7OLcaY5r

Score

N/A

Malware Config

Signatures

Files

82181b64710e9711f2cd20417cbfb01d9652c0d794bab9dc4502f86c704ad184
.exe windows x86

0452c307d7d53d56d89cf689c757c1a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GetModuleHandleA
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetComputerNameA
GetVolumeInformationA
GetSystemDirectoryA
GetProcAddress
ExitProcess
ExitThread
CloseHandle
TerminateProcess
OpenProcess
RaiseException
LoadLibraryA
CreateFileA
GetCommandLineA
GetVersion
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ