a57c12653e94884d0ce9de47c558c5e074d75a6ce98ff96a8bd5a691e4424077 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a57c12653e94884d0ce9de47c558c5e074d75a6ce98ff96a8bd5a691e4424077
Size

12KB
MD5

4b00942442627dc2b3d56ddd1e46dd69
SHA1

e9201df7c27c0bce9aaa80f3a30055b7ba8b848b
SHA256

a57c12653e94884d0ce9de47c558c5e074d75a6ce98ff96a8bd5a691e4424077
SHA512

109902d708d4963482019b1fd825437b470ad63eb59ae50d89d00c30c185240b6b18ece2acf7ca2fc194323683997b06054e6ad0f8d7cf3f70df3fa970c1c1f7
SSDEEP

192:XQOlsxFHw0H48kVrGo2/rtOPyf6WHPx9uu7JeiqmtGQBTlW:XX4V93o2DkgL5Au7IiqmtGaTlW

Score

N/A

Malware Config

Signatures

Files

a57c12653e94884d0ce9de47c558c5e074d75a6ce98ff96a8bd5a691e4424077
.exe windows x86

76789a90086cb0d5f84b643792ed42d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetVolumeInformationA
Sleep
GetProcAddress
LoadLibraryA
DeleteFileA
GetDriveTypeA
GetCurrentThreadId
GetTickCount
GetTempPathA
lstrcatA
GetLastError
OpenProcess
CopyFileA
lstrcpyA
CreateThread
GetPrivateProfileStringA
MoveFileExA
CreateDirectoryA
GetModuleFileNameA
CreateProcessA
ExitProcess
CreateMutexA
GetCommandLineA
WaitForSingleObject

user32

GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA

msvcrt

??2@YAPAXI@Z
_strcmpi
strstr
fread
sprintf
fclose
fopen
??3@YAXPAX@Z
_strlwr
malloc
fseek
fwrite

Sections

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE