d3ba339aa016e3a17200ba701ab9a33a51079105a1808008141a32f48a33ae95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3ba339aa016e3a17200ba701ab9a33a51079105a1808008141a32f48a33ae95
Size

20.0MB
MD5

0f29b4fb5ca2161852486e68cfa93d56
SHA1

33518cddfe1260d243b63b32f776a00c00577dc4
SHA256

d3ba339aa016e3a17200ba701ab9a33a51079105a1808008141a32f48a33ae95
SHA512

d7d1110038a1055f59e4972963a46ca59518bbde510e522d5e15862c1bba2e0b732ab88b896b667bb340fa78d444170d09a7aea631415c800d737d5a3f435c76
SSDEEP

393216:HQ2rkimdhqnnX5ypFEE6571bvt21UX0CW0RsuBieogUvdNOftEn7zmVbHrJlTy:HQ2rkimdhqnWc5d13X5subicftCWVDrm

Score

N/A

Malware Config

Signatures

Files

d3ba339aa016e3a17200ba701ab9a33a51079105a1808008141a32f48a33ae95
.exe windows x86

3525a20d57c512765c45d5be90fb5472

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FindResourceA
GetProcAddress
Sleep
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapFree
RaiseException
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
FlushFileBuffers
SetStdHandle
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ