df419522d9e4a7fdc4eb0615f2a7af5c338e79a4e5f1433fa3c5b0b36e7deac7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df419522d9e4a7fdc4eb0615f2a7af5c338e79a4e5f1433fa3c5b0b36e7deac7
Size

35KB
MD5

ea31a26b45ac426dcd3fed4a04ed742b
SHA1

617eb477ccd2e57ebd35af1dd14dcfa014860440
SHA256

df419522d9e4a7fdc4eb0615f2a7af5c338e79a4e5f1433fa3c5b0b36e7deac7
SHA512

b0320293db1451b8c4912fdb5bc878d43b05ea8dfa74a9456db11939f2f7fb42ad2804be6ea4e6e1dc72a62ff4ad3769f7db9c6cf499b842b1d8ca184e7d630f
SSDEEP

768:b0Q1YrdbbnIxnJMGGAYxCC+XDZvtAZPayaoYakLwxNEawJnOismdNNQTxvbkou:4Q1YRvIxe/rGZvmZC9DLwxNIOdT5bju

Score

N/A

Malware Config

Signatures

Files

df419522d9e4a7fdc4eb0615f2a7af5c338e79a4e5f1433fa3c5b0b36e7deac7
.exe windows x86

22f438cb76a710ffc6fd1436eb0f4d46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceCounter
ExitProcess
GetTickCount
GetModuleFileNameA
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE