ca1b60acb4617cfa268a112c5ef83d1ecfbc5e3826af6ce56b73468ac0f6f276 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca1b60acb4617cfa268a112c5ef83d1ecfbc5e3826af6ce56b73468ac0f6f276
Size

153KB
MD5

0571b9fdc8a8ea395d39632c63a343c0
SHA1

8c3df61c5ff1092eefb02b60cdd33c774f9bae61
SHA256

ca1b60acb4617cfa268a112c5ef83d1ecfbc5e3826af6ce56b73468ac0f6f276
SHA512

38ec60676810be461092cc2d7a71d44edb54a54594d88a50e6726790ed2417b95d1323537a0fbae52f212c8790e5de87502deffb7cfd0f3f111c4fef4950cd95
SSDEEP

1536:gkWbhgW5o1oS4l1TfG8Umu3/IdsGmPIxl8F4L0a8fcqy:FW+1oS4l5OeuQdrmwvL8Eqy

Score

N/A

Malware Config

Signatures

Files

ca1b60acb4617cfa268a112c5ef83d1ecfbc5e3826af6ce56b73468ac0f6f276
.exe windows x86

b71f5cc166942efb8e82db8f3a9a3989

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
DeleteFileA
GetWindowsDirectoryA
GetVolumeInformationA
GetSystemInfo
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ