e32b66945bcf1a253b0a176e3e26279a72148b3178580a20972809e86e928f6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e32b66945bcf1a253b0a176e3e26279a72148b3178580a20972809e86e928f6c
Size

10.8MB
MD5

ff31a50528fe81fe90bcc35ad6694495
SHA1

1e60bc5281225ff5a85dd56c57e38afdf1237822
SHA256

e32b66945bcf1a253b0a176e3e26279a72148b3178580a20972809e86e928f6c
SHA512

51c16f7c0f1a613b950495d1f8bd1b9ea29fb40f55cecd9373be21857231f07b6c4ab28a470b182bed6170cd026e839202915dfc90f3ede459bde570ff2790fc
SSDEEP

196608:GimdhqnnOM6ceqvzy11iNmy2DvQzeGZd+TJChSwHuxZefJf:GimdhqnnXZrywlovQq2GJChSws8Rf

Score

N/A

Malware Config

Signatures

Files

e32b66945bcf1a253b0a176e3e26279a72148b3178580a20972809e86e928f6c
.exe windows x86

e6b579b81fb26836f294d9a0aee7d052

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FindResourceA
GetProcAddress
GetThreadContext
Sleep
SetStdHandle
LCMapStringW
LCMapStringA
ReadFile
GetStringTypeW
GetStringTypeA
SetFilePointer
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetLastError
FlushFileBuffers
CloseHandle

user32

GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
MessageBoxA
PeekMessageA

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ