4e132eb027dcbfca66005dbd4b1eb4e0db93bc620b6744a4d78a4e0f3b99c96a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e132eb027dcbfca66005dbd4b1eb4e0db93bc620b6744a4d78a4e0f3b99c96a
Size

48KB
MD5

1b41baf33912cc3a258b036aaae53b70
SHA1

ed36b54bfab837c302b7e4eef4b3265f1fc94ad5
SHA256

4e132eb027dcbfca66005dbd4b1eb4e0db93bc620b6744a4d78a4e0f3b99c96a
SHA512

926e42af103451092c3e0a08a971287e3b65bea80215507982e4258c17424bde6fea6544a4dbd4d4dc6f822c6d022af9f17fcabe363f63c7eb3d2dc897f71ae5
SSDEEP

768:UlTgP2ANyLp5XIFbR0uY25BQkLJlwt7R8:UlTA1NI3W95B9otl8

Score

N/A

Malware Config

Signatures

Files

4e132eb027dcbfca66005dbd4b1eb4e0db93bc620b6744a4d78a4e0f3b99c96a
.exe windows x86

bf56405bd43c0a2c3738c89f3ba9d397

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ResumeThread
CreateProcessA
GetCurrentThread
GetCurrentProcess
lstrcatA
lstrcpyA
Sleep
GetShortPathNameA
GetSystemTime
ReadFile
SetFilePointer
WriteFile
GetTempPathA
GetLocalTime
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
GetModuleFileNameA
ExitProcess
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLastError
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE