ed4495f10e8869252014194fb45d173a6c892972bdd6fb8afeeb07bf7bbe715c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed4495f10e8869252014194fb45d173a6c892972bdd6fb8afeeb07bf7bbe715c
Size

396KB
MD5

e77e11c8310beb4bfc32d5ebc13c7524
SHA1

6a0ef1041c79c0d3f5f313bea35a6c08f5b24259
SHA256

ed4495f10e8869252014194fb45d173a6c892972bdd6fb8afeeb07bf7bbe715c
SHA512

cdf99c261e43156d43bdea6ed907933008cbe3db8024b3e8e55641075ee254c64227dee16fe460be0be214d037de31f8d815bf6c128a6606e0b6c9f1490c6ba1
SSDEEP

6144:HdrNxCJuLPkOeRTsm03ZcZyJ7Uz9XiHPHFa5MgWHzit3+AMrVt+nTFElxd9Ue:hSutezbZVz5wH+MgW+t3+AFnTGln+

Score

N/A

Malware Config

Signatures

Files

ed4495f10e8869252014194fb45d173a6c892972bdd6fb8afeeb07bf7bbe715c
.exe windows x86

6b96dc56d37f8a3da571994de1496e21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
VirtualAlloc
GetModuleHandleA
VirtualFree
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeW

user32

EnableWindow
LoadIconA
GetDesktopWindow

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ