d8c317f0046bc0e815bfaa34bc608c56f7b769c764273f4ebba98f042d2b7b39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8c317f0046bc0e815bfaa34bc608c56f7b769c764273f4ebba98f042d2b7b39
Size

2.0MB
MD5

a44d384f1806e520508e3b6b8d97eb3f
SHA1

d3fd86399a214042bb9cabb2fa9b49dad24037b1
SHA256

d8c317f0046bc0e815bfaa34bc608c56f7b769c764273f4ebba98f042d2b7b39
SHA512

86dc29e600dce02da05e285d56a75b45b3e20c13384d4cd196e8233b44bf520db4ae1f01461902ee055552a008932f73bf58483d92c3273be247ed30c4dcb8ac
SSDEEP

24576:bqLKWDA4hWS/EDfX2SqxvHtrRqRPpkhbJ3333lR3X66jA0G9V0/25M1Jmiq+KItb:bqLJh5/E76ePpUPgg1015+

Score

N/A

Malware Config

Signatures

Files

d8c317f0046bc0e815bfaa34bc608c56f7b769c764273f4ebba98f042d2b7b39
.exe windows x86

1dd8eb3a167c984311c7b9cedf4bf2cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

StrStrA
StrChrIA
ShellExecuteA
SHGetSpecialFolderPathA

kernel32

CreateFileA
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
RtlZeroMemory
LockResource
LoadResource
GetTickCount
GetModuleHandleA
GetCurrentDirectoryA
CloseHandle
CopyFileA
ExitProcess
FindResourceA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE