84169c4c36d2510d5db492af1bb3866920f6fdcb00b47d30fe38b91f553c72d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84169c4c36d2510d5db492af1bb3866920f6fdcb00b47d30fe38b91f553c72d7
Size

32KB
MD5

deefff46643ab8e637ab52d2c2011b9f
SHA1

9948a00be553046be6584240af079aa47e62baba
SHA256

84169c4c36d2510d5db492af1bb3866920f6fdcb00b47d30fe38b91f553c72d7
SHA512

cd55faea65b35007ebd4eaa24ac0660ef75e0b7f1cbb0c1072dd70d7d9ddc198beb080ffc82d695333655f560bd32a0b67148e53922c1d6b1c8572e08ffbdece
SSDEEP

384:RkXJeorkBNeLNek+vDWGVmo0sdEpjE8YFvx1C27x7zcIj9OFNTzN7z1NeLNek+vT:RkXgog/Vmo0JE8i1C27Lw3fN

Score

N/A

Malware Config

Signatures

Files

84169c4c36d2510d5db492af1bb3866920f6fdcb00b47d30fe38b91f553c72d7
.exe windows x86

db253ebebb6da33b7abdb9a467a22388

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetTempPathA
lstrlenA
CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindResourceA
FreeResource
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
LockResource
SizeofResource
Sleep
WriteFile
lstrcatA
lstrcpyA

Sections

.text
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ