96598120972f97f95403609f6c669c238b80005000e0262e62ffab4b947e8c49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96598120972f97f95403609f6c669c238b80005000e0262e62ffab4b947e8c49
Size

168KB
MD5

7a219b1354a96bdd4ec971b733a4a63e
SHA1

0d305e1bd24c80c4ddd07b8fef1381d021160a70
SHA256

96598120972f97f95403609f6c669c238b80005000e0262e62ffab4b947e8c49
SHA512

b25b89afbee18a67cbc41da6d512d3ae88285ceaa48cc00cbf9e2b2736a818ebaa5cb13eb051ad392e853ce80e9b9ba44c92af29c9542c546b42bfac7af51b6c
SSDEEP

3072:bO1YGIBxXx3bpy5oX1OL0kpMvw9t16zA4ziX/36Lcg1c8SI+x7hcLxKl:bEut1bp4gkLevGX6zyPKLb7HuhcLxKl

Score

N/A

Malware Config

Signatures

Files

96598120972f97f95403609f6c669c238b80005000e0262e62ffab4b947e8c49
.exe windows x86

6d1801d3a86dabcc11dd2a73f091e307

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcpyA
MultiByteToWideChar
lstrlenA
CloseHandle
GetFileTime
GetFileAttributesA
HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetLastError
ExitProcess
WideCharToMultiByte
GetTickCount
SetEnvironmentVariableA
GetTempPathA
LocalFileTimeToFileTime
SystemTimeToFileTime
lstrcmpiA
Sleep
ExpandEnvironmentStringsA
GetModuleFileNameA
GetCommandLineA
GetStartupInfoA

user32

wsprintfA

shlwapi

SHDeleteKeyA

msvcrt

_itoa
strcpy
tolower
strlen
??3@YAXPAX@Z
wcscpy
_controlfp
_except_handler3
strcat
strncat
strchr
memset
rand
srand
_ftol
memcpy
__CxxFrameHandler
_CxxThrowException
strstr
??2@YAPAXI@Z
_strnicmp
_memicmp
_strlwr
_stricmp
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ