a4b6367c16523d37f83c5c4227cd02392e73119bfe0bca55d0cb3451959cf731 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4b6367c16523d37f83c5c4227cd02392e73119bfe0bca55d0cb3451959cf731
Size

177KB
MD5

25a81edfea30e757f90c9ad652ba3770
SHA1

28c3818d9f391935bf07785fe53dab4a932f19f7
SHA256

a4b6367c16523d37f83c5c4227cd02392e73119bfe0bca55d0cb3451959cf731
SHA512

5fd69ff895058a4ebb0cb1703065d226ddd1d95dcc0fc58749994a072d1234755d70c773a1387b09f9b2b1b645184cf7f24e587732c3c077000786322f7159e0
SSDEEP

1536:gkWbhgW5o1oS4l1TfG8Umu3/IdsGmPIxl8F4L0a8fcq0/dPO7dg/vzcx3j:FW+1oS4l5OeuQdrmwvL8Eq1

Score

N/A

Malware Config

Signatures

Files

a4b6367c16523d37f83c5c4227cd02392e73119bfe0bca55d0cb3451959cf731
.exe windows x86

b71f5cc166942efb8e82db8f3a9a3989

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
DeleteFileA
GetWindowsDirectoryA
GetVolumeInformationA
GetSystemInfo
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ