ce79ad5efefe88957e866606700e41b688110f3f54d04f1eff558179caba220d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce79ad5efefe88957e866606700e41b688110f3f54d04f1eff558179caba220d
Size

50KB
MD5

3167af4550f6c1628cb877e80c6e8acd
SHA1

7fb2cf947f6e0434de0595ed9472eaccb0682206
SHA256

ce79ad5efefe88957e866606700e41b688110f3f54d04f1eff558179caba220d
SHA512

0c217452fccf8d77b44628146225fbb403d5dbecf2014fd31c1132b5a4ffe3bb0bf07be27be5970830289995c0192f36beb28fcf21d32967c34c5181ababd1b4
SSDEEP

1536:ts6AmCbkIZ8s3lvNoXYKZUzAcbnyXgJjckTO:tP4Ws3lvNoIaUtDuF

Score

N/A

Malware Config

Signatures

Files

ce79ad5efefe88957e866606700e41b688110f3f54d04f1eff558179caba220d
.exe windows x86

cd9ef165d9f7496e37fa71580a62de6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
VirtualAlloc
VirtualFree
CloseHandle
WriteFile
ReadFile
SetFilePointer
GetModuleFileNameA
CreateFileA
SetFileAttributesA
lstrcatA
lstrcpyA
GetSystemDirectoryA
GetTickCount
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryA
CreateProcessA
GetTempPathA
GetFileAttributesA
ExitProcess

user32

GetCursorPos

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newsec
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE