0f0298a24d1d9f5bd266a9ee5dd213be8b0637851e80d402889fe21642c1d966 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f0298a24d1d9f5bd266a9ee5dd213be8b0637851e80d402889fe21642c1d966
Size

84KB
MD5

78e3174bf6bf01e32c0aa0dfd1bbdb05
SHA1

54963d2dd0ccb8cf4b8fc81e960b0f3ed53f70d6
SHA256

0f0298a24d1d9f5bd266a9ee5dd213be8b0637851e80d402889fe21642c1d966
SHA512

78269bd127f82a815588cf95460f2b940d670023ec91273fd5fbfe5f3b94a9852eb22263e01e9a9158127165eeb6c95b50039309abbb390b57fbd038b29558f3
SSDEEP

1536:co6wxsPz6g/bI5yOKLUm6qlrdpwo+khDlrIVIXMlLdk0dDcZ1:co6wgz6IGyHLUm6iZiolhDyVIXsLaIe1

Score

N/A

Malware Config

Signatures

Files

0f0298a24d1d9f5bd266a9ee5dd213be8b0637851e80d402889fe21642c1d966
.exe windows x86

c053051c5835187aaed6edfebc7b5926

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
cos
strcpy
__getmainargs
_snprintf
strncmp
_acmdln
_initterm
getenv
fclose
__p__fmode
_except_handler3
malloc
strchr
fopen
strcmp
_setmode
fflush
_iob
__setusermatherr
_XcptFilter
_adjust_fdiv
fwrite
__p__commode
free
exit

kernel32

GetStartupInfoA
GetModuleHandleW
VirtualProtect

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE