b70cd3a7ec7068a764b1b6601e1a9eef7e7e4ca4298575ccce84007d837b08a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b70cd3a7ec7068a764b1b6601e1a9eef7e7e4ca4298575ccce84007d837b08a0
Size

69KB
MD5

3b80473b63ea800c59a17851bb99a7d4
SHA1

43518aa44552b83d6ea5b2c0da5f964302232eaa
SHA256

b70cd3a7ec7068a764b1b6601e1a9eef7e7e4ca4298575ccce84007d837b08a0
SHA512

a5f7177e4c7e06eb70237a05a8503ef2f18f8aa2d1e7c7f23a75725e76dd7701d31f42a6009079523b231d0f907d3901703ca5c915bdc738d204289000c998da
SSDEEP

1536:p8v56dmPtkHNpaM++0qleKx2iPKnn6rFgSS2Z0MtbbKNHcg:p8vxyeqoK0iPKo0MtbbKhl

Score

N/A

Malware Config

Signatures

Files

b70cd3a7ec7068a764b1b6601e1a9eef7e7e4ca4298575ccce84007d837b08a0
.exe windows x86

81e84ce22014f183b970fcd6516e22aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
GetEnvironmentStringsW
GetConsoleMode
RtlMoveMemory
SizeofResource
CopyFileA
GetThreadLocale
GetSystemDirectoryA
CompareStringW
VirtualProtect
GetCurrentProcessId
SetFileTime
GlobalAlloc
GetTempPathA
lstrcpyA
CreateDirectoryA
GetStringTypeExA
GetProcAddress
GetExitCodeProcess
GlobalHandle
GetModuleHandleA
LoadResource
DeleteFileA
GetTempFileNameA
GetCurrentThread
lstrcmpiA

msvcrt

__p__commode
_controlfp
_adjust_fdiv
__p___initenv
_XcptFilter
_exit
_initterm
_except_handler3
__getmainargs
__p__fmode
__set_app_type

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ