a0f658c34bd0bd5069682164a678f9a940a23c8dc8e4160b4f3151ec934c3e9c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0f658c34bd0bd5069682164a678f9a940a23c8dc8e4160b4f3151ec934c3e9c
Size

344KB
MD5

51405059bfd0382c4d921f04d3acd9c9
SHA1

8e0172483e80afc019aa6a3b10e2118bb7e1ed8e
SHA256

a0f658c34bd0bd5069682164a678f9a940a23c8dc8e4160b4f3151ec934c3e9c
SHA512

2cef39a87cda4f2183547030254d3b8801439e68471076acbb3eafd75b547b7e37432c0203897ffff0b285a365f2e3d454158a3876d04a48e03d2d681deee8fd
SSDEEP

6144:4c6ZZclfqmPgNKV7p5o41/fXLadRTHV2bVhKirgtHQm4c7/iIJ0:456lfqmoNgXLO12bVhKiLbI

Score

N/A

Malware Config

Signatures

Files

a0f658c34bd0bd5069682164a678f9a940a23c8dc8e4160b4f3151ec934c3e9c
.exe windows x86

cf0c840c727c4e40934f34c9c4d7ffc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetCommandLineA
VirtualProtect
GlobalFree
DebugBreak
GetModuleHandleW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
Sleep
GetCurrentThreadId
DisableThreadLibraryCalls
GetModuleHandleA
GetStartupInfoA

msvcr71

free
strncpy
_c_exit
_adjust_fdiv
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_except_handler3
_exit

Sections

.text
Size: 328KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ