da32a4fe90df798c9492b92965ec1e40e7111f12761561cb42367ba310e56d7f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da32a4fe90df798c9492b92965ec1e40e7111f12761561cb42367ba310e56d7f
Size

113KB
MD5

01da8915f38338b25a2e4f0bf50c2395
SHA1

e688d8f2c16a19c1e8f75c1fbf3524e6eb48e02a
SHA256

da32a4fe90df798c9492b92965ec1e40e7111f12761561cb42367ba310e56d7f
SHA512

a611e129e60b4c7cd931c55dcf5c1b7823bf6e78f258ccb31fc0b9ce7f7257f44d127ba5c703d58e40afca1125ceaab01fe9e4765e1e8dd85336a966313489f9
SSDEEP

1536:LhgGNNGJ43wQwz96/UDNapHdC7xfHJa51IcUw0i/Wrsm7SKzoXD0OiG1RSRKq:LhY+3w76c0UHJw1XHPerspNBPScq

Score

N/A

Malware Config

Signatures

Files

da32a4fe90df798c9492b92965ec1e40e7111f12761561cb42367ba310e56d7f
.exe windows x86

eaa9dbcaaf6db4dad612338acafc7ce9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetCommandLineW
GetFileType
GetACP
DeleteFileA
Sleep
FreeResource
ExitThread
GetProcAddress
GlobalAlloc
GetModuleHandleA
GetCommandLineA
GetModuleHandleW
LoadLibraryA
LocalAlloc
VirtualAllocEx

Sections

CODE
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ