d19b3bdbaa94fa836ed594b2ed061f889de142d5c01d90d67d630ddfecd76f39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d19b3bdbaa94fa836ed594b2ed061f889de142d5c01d90d67d630ddfecd76f39
Size

223KB
MD5

f97dcb982ea6ec35f66d398ded3ec651
SHA1

9062460707bb0d1bfc929cbee377349af5e502ab
SHA256

d19b3bdbaa94fa836ed594b2ed061f889de142d5c01d90d67d630ddfecd76f39
SHA512

517c0eb4bb4f3e42d9064c21976bf3536b017acd4aec97ffd486e3c1bceb636b659c772504e7a21739c32e6ce43c62735d317c6fdc4c13cd385fa9c3e5a6cecc
SSDEEP

3072:BBJMsfViD/mFKm0MtzBJMsfViD/mFKm0Mtvnm5XsaCCyaSlsFl2bp25/v1xqbm9K:CsfVKNMysfVKNMB4XsIyaSlsFAs2NVB

Score

N/A

Malware Config

Signatures

Files

d19b3bdbaa94fa836ed594b2ed061f889de142d5c01d90d67d630ddfecd76f39
.exe windows x86

8b4cc2be0324264fac1338e1727600aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 218KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ