f75e62808b5d5f1cef4edec61ceda248a94978f5f19ef86b532e1582d2e09172 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f75e62808b5d5f1cef4edec61ceda248a94978f5f19ef86b532e1582d2e09172
Size

120KB
MD5

4b793d1a1803a35cecd9f6caf99d4130
SHA1

198d8099946f5a6283ad1177b12ab5275c579daf
SHA256

f75e62808b5d5f1cef4edec61ceda248a94978f5f19ef86b532e1582d2e09172
SHA512

0415b0a23d873ebbd475752c627e6bc39be38b21a1cb98020fdada68e59a6b8162d2fdc2632182c48ffdd874aff492000a2f62d410c8daf1c60ec2e102e0e016
SSDEEP

3072:9GnXRjh3hU83NhHOPy1TwoK2u0dOBnugfUWczoHV0/:K5h3mMN8a1TzdOtugfZbHg

Score

N/A

Malware Config

Signatures

Files

f75e62808b5d5f1cef4edec61ceda248a94978f5f19ef86b532e1582d2e09172
.exe windows x86

8aeb9b2a9c3b8bb86d0b7c42e15c479b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetLongPathNameA
WaitForSingleObject
InterlockedIncrement
lstrcmpA
GetACP
GetStringTypeW
InterlockedDecrement
FindResourceW
GetModuleHandleW
LoadLibraryA
GetPrivateProfileIntA
Heap32First
ExitProcess
GetPrivateProfileIntA
WriteFileEx
GetExitCodeProcess
lstrcpyW
GetDiskFreeSpaceW
VirtualAllocEx
GetPrivateProfileSectionA
GetDiskFreeSpaceW
SetEnvironmentVariableA

apphelp

SdbCreateMsiTransformFile
ApphelpCheckExe
AllowPermLayer
ApphelpCheckIME

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE