e20f1b593139e8b404ac9938821744b061a5209d3c0d403d252dbf0e8ea409bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e20f1b593139e8b404ac9938821744b061a5209d3c0d403d252dbf0e8ea409bd
Size

116KB
MD5

2ac49a7db9e7afce5c9493a852a14b9c
SHA1

144eb683d0682089a8d41eef2fc1964323c10698
SHA256

e20f1b593139e8b404ac9938821744b061a5209d3c0d403d252dbf0e8ea409bd
SHA512

70497054b841bf52ba8b642bc50d3290db850a914c5debbc5f50a2892709259de1de71e8e7905b9d3b7371cf35fc14572305914e1c20781b94090e98c63b95c7
SSDEEP

1536:o8IcoZVIzbfhcU9yzeON6/+0ZH/N9ChzeJsR0Y3gAm+BmHSUNLpipTH/z8hWwoeU:o8Icob+bBkZN4+0RCReJsFJ2ULw4

Score

N/A

Malware Config

Signatures

Files

e20f1b593139e8b404ac9938821744b061a5209d3c0d403d252dbf0e8ea409bd
.exe windows x86

007be9b26ef2a75b74392e8a6b5f0067

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
InterlockedDecrement
LCMapStringA
GetWindowsDirectoryA
VirtualProtect
GetModuleHandleW
CompareStringW
lstrcpyA
MoveFileA
InterlockedExchange
IsBadWritePtr
InterlockedCompareExchange
IsBadReadPtr
TerminateProcess
GetSystemTime
lstrlenW
SetThreadLocale
DeleteFileA
IsValidCodePage
GetThreadLocale
VirtualFree
GetFileType

msvcrt

__set_app_type
__p__fmode
_XcptFilter
__p___initenv
_controlfp
free
_except_handler3
__getmainargs
_exit
_adjust_fdiv
__p__commode
_initterm
calloc
atan2

Sections

.text
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ