d6d81b59627a3bbf03c0852f709ede0d47b6912ea785ee00fef7374802b6f14f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6d81b59627a3bbf03c0852f709ede0d47b6912ea785ee00fef7374802b6f14f
Size

136KB
MD5

07f4218e17da9fd1e6ce11e7d0d45b50
SHA1

5e8586fb61653b17f0a5286008df8a5c261aa3cb
SHA256

d6d81b59627a3bbf03c0852f709ede0d47b6912ea785ee00fef7374802b6f14f
SHA512

854a9132ea279ef3a00732716faee217d140ac5b3a4baf9b86d30ce34e4873a597195f853d6aeec1e71e049b32b995eec84988197573aad79abbc1aade2631e1
SSDEEP

1536:95W65+2dxbZtoIwGS8JBh+mSEx1jeYSchAb+puLC5PQmskBTU8TxxiLeN:jW5MbnownJBRxteYScB0C5omskBTU87J

Score

N/A

Malware Config

Signatures

Files

d6d81b59627a3bbf03c0852f709ede0d47b6912ea785ee00fef7374802b6f14f
.exe windows x86

e4bed1c0ed5f0904c6d73d069fefaffc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
DeleteFileW
LCMapStringA
GetOEMCP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
LCMapStringW

user32

IsDlgButtonChecked

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 613KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ