e16ff963b0441957e1213f7bf9ff6e2f05a36d205424a0c07437045d88bc10e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e16ff963b0441957e1213f7bf9ff6e2f05a36d205424a0c07437045d88bc10e1
Size

25KB
MD5

569d9a2baa3e95c85ac1f217557da1e8
SHA1

b7873c5f2bd6c06b6db177cf4cb6c9befa858183
SHA256

e16ff963b0441957e1213f7bf9ff6e2f05a36d205424a0c07437045d88bc10e1
SHA512

5a165e5ec3dbf6810cf24220e055692711261a4ae3663c942becf782d663576dd694879037178c7dadf4efa0b18dc21173a972a95cef755ac073fbd50ac45cdd
SSDEEP

384:KXrh209bVraBdipGrIQLx/AamK8S+FN/tbEkjUxiCwc5rp:G1kipmI0xQK8S+N/tYZxb3R

Score

N/A

Malware Config

Signatures

Files

e16ff963b0441957e1213f7bf9ff6e2f05a36d205424a0c07437045d88bc10e1
.dll windows x86

c37c2563171c9431ee5b935e12e0cac5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
CloseHandle
LocalFree
GetCommandLineA
GetLastError
GetFileSize

msvcrt

exit
wcstoul
memmove
toupper
__getmainargs
__set_app_type
__CxxFrameHandler

Sections

.text
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ