d93a893891ea438c274c38b89683fadb266187503dbdab47ef2abfde9a783c92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d93a893891ea438c274c38b89683fadb266187503dbdab47ef2abfde9a783c92
Size

344KB
MD5

4d8657ae655c2f0b38c4d61bf7727c96
SHA1

463e2bfdeb0fed1d5396d90e246b95ac5ab97e48
SHA256

d93a893891ea438c274c38b89683fadb266187503dbdab47ef2abfde9a783c92
SHA512

21b9ab1ca63acdda5c82e3cbf4202b898c35dd873eeb951c9b8fc36db3302346acd561d83f16e1c9e4014bed0fdaf8b919b1db5391b787abee395904c1f84943
SSDEEP

6144:4c6fa0reQPgNKV7p5o41/fXLadRTHV2bVhKirgtHQm4e7/iIJ0:4/asToNgXLO12bVhKiLlI

Score

N/A

Malware Config

Signatures

Files

d93a893891ea438c274c38b89683fadb266187503dbdab47ef2abfde9a783c92
.exe windows x86

cf0c840c727c4e40934f34c9c4d7ffc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetCommandLineA
VirtualProtect
GlobalFree
DebugBreak
GetModuleHandleW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
Sleep
GetCurrentThreadId
DisableThreadLibraryCalls
GetModuleHandleA
GetStartupInfoA

msvcr71

free
strncpy
_c_exit
_adjust_fdiv
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_except_handler3
_exit

Sections

.text
Size: 328KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ