f1b1a759565daab91ee52375d096bba9fe7723d0d4cd481ea208a80ab3ddb543 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1b1a759565daab91ee52375d096bba9fe7723d0d4cd481ea208a80ab3ddb543
Size

22KB
MD5

728553371840976572ca21e0ff41c93b
SHA1

dddaf7d6605e2e703c4533d2d1429803abc62ad8
SHA256

f1b1a759565daab91ee52375d096bba9fe7723d0d4cd481ea208a80ab3ddb543
SHA512

e2d80d899e551c423372eb1c8d510f90ebae06b73ad1268ec9e7c396dd991255f0ac370b50c1256052133c948267cf1df2f5119d00725b593d95b173dd5191f8
SSDEEP

384:H2pOXmAXMFdCO2nPdCN585cLHdw+Qr8//0:H2XUMFL2nFE5BHdw7K/

Score

N/A

Malware Config

Signatures

Files

f1b1a759565daab91ee52375d096bba9fe7723d0d4cd481ea208a80ab3ddb543
.exe windows x86

591ce10b5f24c8684218c1f176edc3d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GetCommandLineA
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
LocalFree
CreateThread
MapViewOfFile
SetErrorMode
Sleep
VirtualProtect
WideCharToMultiByte
lstrcmpiA
LocalSize

user32

AdjustWindowRectEx
DrawEdge
DrawFocusRect
GetWindowPlacement
MessageBoxW
TranslateAcceleratorW

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ