81134513914cac4ca864929867de53d8be43e606041705871d10b6c888e4bf09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81134513914cac4ca864929867de53d8be43e606041705871d10b6c888e4bf09
Size

20.0MB
MD5

951d0bd65f2a545661a5aac533611d63
SHA1

a1bd97767cd0691c559212e5e8ea2b8d81159036
SHA256

81134513914cac4ca864929867de53d8be43e606041705871d10b6c888e4bf09
SHA512

b6293144302a2bcdd7e04db60c161948615cc577ccb6a28c3f2f949182d1892e213517d715d828ae42bc772231a8caf3a8c662b4f32f75cf91a581562ba4bf1a
SSDEEP

393216:XimdhqnFQ0JSnw/gH4pzxFISI55FusvX3eVsqImNn5EJLjBCe6jDr924:XimdhqK0sY7FIvssvX31pmx5EJ53e

Score

N/A

Malware Config

Signatures

Files

81134513914cac4ca864929867de53d8be43e606041705871d10b6c888e4bf09
.exe windows x86

672a969ce0c12cd53633a53c650807df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
WaitForSingleObject
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

GetDesktopWindow
PeekMessageA
AnyPopup

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ