96f0cc63a11302a13004141d88c0597fa38c39ed191897f128c0ebbfa274e988 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96f0cc63a11302a13004141d88c0597fa38c39ed191897f128c0ebbfa274e988
Size

12KB
MD5

7be02808d3c9f8c24661e6bf845f4c2a
SHA1

04f911e18d71fc7746ad9ed4e11303e77489a0e8
SHA256

96f0cc63a11302a13004141d88c0597fa38c39ed191897f128c0ebbfa274e988
SHA512

0bf7b484163f170b9ce6bfe3ec77cda0f9a0097c9c7df4d9b559715196108dd80054750768845706bee9708dc0e6bb14bea39179f13fdf5f8b69ed7d95245cf3
SSDEEP

192:+0H0GawUqG9Qx+xyyAlAwxyyAeduRFFzuxyyARK1TeSma:+qxDUqG9C+4yLw4yfh4yyseS

Score

N/A

Malware Config

Signatures

Files

96f0cc63a11302a13004141d88c0597fa38c39ed191897f128c0ebbfa274e988
.exe windows x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ