bad289707dad29a93fa156f0b0f5207493d8ff9240b9cb28fe59160dbf022640 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bad289707dad29a93fa156f0b0f5207493d8ff9240b9cb28fe59160dbf022640
Size

122KB
MD5

006db49b416a8bce37dce798b65eb73d
SHA1

b6483228e18e82750fae306d3e8a33beb527c218
SHA256

bad289707dad29a93fa156f0b0f5207493d8ff9240b9cb28fe59160dbf022640
SHA512

a7c0a05e883149d789375441a2428d3334f5c869fb76934d6fb03d506ce35944c7e43b7edc2f69d5b17ae2ad38019b1656920515c05d3ae0d23cd12ea718cc43
SSDEEP

3072:Txb/NBvAbdrVHBAiJuBt16l+hi8LSS2qhtX8RP:TF/rAbLBAjT6l+hzLzhf

Score

N/A

Malware Config

Signatures

Files

bad289707dad29a93fa156f0b0f5207493d8ff9240b9cb28fe59160dbf022640
.exe windows x86

c06d039b2e6eb01829c9eec1dd245305

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
CompareStringA
GetEnvironmentStringsW
lstrcatA
GetCommandLineW
RtlUnwind
SetFileAttributesA
GetCurrentProcessId
SystemTimeToFileTime
VirtualProtectEx
GetProcessHeap
GetCurrentDirectoryA
GetModuleHandleW
GetVersion
GetProcAddress
lstrcmpA
WriteConsoleA

msvcrt

_initterm
free
_except_handler3
__setusermatherr
_adjust_fdiv
__set_app_type
__p__fmode
__p___initenv
_controlfp
__getmainargs
_XcptFilter
__p__commode
_exit
calloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE