85199751ed41f12751d36f567d0105988d8f1c2398ce3429b5c4c7a661d1d7af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85199751ed41f12751d36f567d0105988d8f1c2398ce3429b5c4c7a661d1d7af
Size

320KB
MD5

916d159eed0fac48968283dc73c3d17e
SHA1

baaeaa050b0c1f97ee86671a5c3a14fb1064c3cd
SHA256

85199751ed41f12751d36f567d0105988d8f1c2398ce3429b5c4c7a661d1d7af
SHA512

59ee8e34b0b762699465d54fce79d9a4da2545113b1d0fe41d4007c6d73713473acefcf7cac5f3287d40b2442686fb93b14bd813606143a2e1ff6ca96e0b782f
SSDEEP

6144:/XmGHJCRw1mzhMW6MAwlWEpLaqQxNbwDSv/:fm6jmFHpW4a5ce

Score

N/A

Malware Config

Signatures

Files

85199751ed41f12751d36f567d0105988d8f1c2398ce3429b5c4c7a661d1d7af
.exe windows x86

79b586617ade313665797ccd8d89491e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
CloseHandle
ReadFile
WriteFile
SetFilePointer
CreateFileA
lstrlenA
lstrcatA
GetProcAddress
LoadLibraryA
DeleteFileA
Sleep
GetModuleFileNameA
GetCurrentDirectoryA
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LCMapStringW

shell32

ShellExecuteA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE