b4e27f64bb45af916f92c28832bbe6faf8534c1ac6b351983a42b8ca21e707ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4e27f64bb45af916f92c28832bbe6faf8534c1ac6b351983a42b8ca21e707ac
Size

309KB
MD5

7beabca02e3bc2dca4ced886c5821768
SHA1

1fec54fa117f54b2f663d3862c8ee36f4a955b3e
SHA256

b4e27f64bb45af916f92c28832bbe6faf8534c1ac6b351983a42b8ca21e707ac
SHA512

c4b2f7c547e62ad33ab4ef8477fab1453339c501e844f7707be3d855f0cb7bb9f846dd258267f366b0ce99b89fe198314c6a4688a9d1024baeb1304ec021d063
SSDEEP

6144:6ss7DPRB6axgPRF1B5umWpX3ETiYrQpffeQrT9JLdPnKIhMbUSY1WrAoU:E7D5ghF1B5DWFIncRH8IhyYeAt

Score

N/A

Malware Config

Signatures

Files

b4e27f64bb45af916f92c28832bbe6faf8534c1ac6b351983a42b8ca21e707ac
.exe windows x86

293070e15a96d3d955583d3abaad2a0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
GetModuleHandleW
GetPrivateProfileSectionA
GetACP
VirtualAllocEx
lstrcmpA
Heap32First
InterlockedDecrement
GetStringTypeW
GetCurrentDirectoryA
GetDiskFreeSpaceW
FindResourceW
GetPrivateProfileIntA
GetDiskFreeSpaceW
lstrcpyW
GetLongPathNameA
GetPrivateProfileIntA
LoadLibraryA
ExitProcess
WaitForSingleObject
InterlockedIncrement
WriteFileEx
SetEnvironmentVariableA

apphelp

ApphelpCheckIME
ApphelpCheckExe
AllowPermLayer
SdbCreateMsiTransformFile

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE