c25f94fa61984b51c225d755b218fd112b502d98eba85cb99367bbea51c23084 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c25f94fa61984b51c225d755b218fd112b502d98eba85cb99367bbea51c23084
Size

50KB
MD5

1049924e6b311104670aabe44c497719
SHA1

02fec8e9e5b9475ae7dc399c9044a3213ef6fb57
SHA256

c25f94fa61984b51c225d755b218fd112b502d98eba85cb99367bbea51c23084
SHA512

e5452739462767852d3e98daf6b9d6c3b302e13cd33b8d7605b9aa6fb905131a4268b2a4ef5a473a88f36cc2d8d4530c80d60d18bf45a86f5920e9d18addf471
SSDEEP

768:V1QM9CFilbA7Oc5fpVZRYMMDHjvEX2nT+ipe8tDWU/LR2NBZpmjEJ+lh:xWi5AzfXYMMHY2nT+ipeYv2ND4xh

Score

N/A

Malware Config

Signatures

Files

c25f94fa61984b51c225d755b218fd112b502d98eba85cb99367bbea51c23084
.exe windows x86

40656839aca8d3facdb9758e3cd30bda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetFileAttributesW
GetModuleFileNameW
Module32First
CreateToolhelp32Snapshot
CloseHandle
WaitForDebugEvent
ContinueDebugEvent
CreateProcessA
GetCommandLineA
GetStartupInfoA
OutputDebugStringA
SizeofResource
LoadResource
FindResourceA
ExitProcess

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ