c116e1b63a1a3d19cedf585f035ebc134b41c1143cfa6a3479afb92bad976a88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c116e1b63a1a3d19cedf585f035ebc134b41c1143cfa6a3479afb92bad976a88
Size

100KB
MD5

3fccc097ff8bb7ea929aaa87b232b0f5
SHA1

dcde55a2f4d17f04b1fb9fd1d2a95abe0f01b822
SHA256

c116e1b63a1a3d19cedf585f035ebc134b41c1143cfa6a3479afb92bad976a88
SHA512

8066c26d6ba45b78d7479ef10b78e8b86ff20eba250eb6ca0b64c034d284cdf0c23e697d128fc3de16691c8ba6c8f5d85fa64c690011b2bfaca2f74c6eb7c901
SSDEEP

768:duN9PHN09lMJqEcuOo+drqP2luZU9QZU9w9wsMmQ3qmjEvMzLP0dJQ5F31rTyOPE:dIPHAlMME44+luz0qmQUeJQfYOP

Score

N/A

Malware Config

Signatures

Files

c116e1b63a1a3d19cedf585f035ebc134b41c1143cfa6a3479afb92bad976a88
.exe windows x86

79c9aef842354aa7be3bd1101a650c20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetFileSize
GlobalAlloc
ExitProcess
GetCurrentProcessId
GetLocalTime
GetTickCount
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
HeapReAlloc
VirtualAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetSystemInfo

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ