96609b65d0b32eef83f3599c33e64b79de76474f37dca70d723b0b170f258b8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96609b65d0b32eef83f3599c33e64b79de76474f37dca70d723b0b170f258b8e
Size

85KB
MD5

1dee599cf888f9580b7926cb34303c00
SHA1

575b9010a3fa7c50afd84803fc0bea74a9b65e10
SHA256

96609b65d0b32eef83f3599c33e64b79de76474f37dca70d723b0b170f258b8e
SHA512

d085a588473f24db4650b6c64c7cf74ffb4c2c28cd92963eec862a3c0c9fd32e7cb2f6c43d415b5b943899699d0a1aa03dc1c74651a61b7bc6862b1a17489471
SSDEEP

1536:oFI0mfwpHtCcDB3sj0l5ljZxCtdUajjk5VDUSpxTqYX6ZQEZd:IooRtCcFcy125wIS162EZd

Score

N/A

Malware Config

Signatures

Files

96609b65d0b32eef83f3599c33e64b79de76474f37dca70d723b0b170f258b8e
.exe windows x86

b558200000bae790f0f605f29424baca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fclose
cos
malloc
__p__fmode
_except_handler3
strcmp
exit
free
_initterm
fopen
sprintf
_adjust_fdiv
__getmainargs
_acmdln
_exit
_XcptFilter
fwrite
__setusermatherr
__p__commode

kernel32

GetStartupInfoA
VirtualProtect
GetModuleHandleW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ