77a1a4740fb40c48e9aa6bf39edd8959071a0eab6906d4e54d1a599c28c38038 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77a1a4740fb40c48e9aa6bf39edd8959071a0eab6906d4e54d1a599c28c38038
Size

3.0MB
MD5

36bb555912b7a739eeba696317962488
SHA1

9e32b22443d264657cda9db38fccbe135a3f3eb9
SHA256

77a1a4740fb40c48e9aa6bf39edd8959071a0eab6906d4e54d1a599c28c38038
SHA512

cb4016342b5fef5964c32fc8b403a43cbc4ba4f14303537c12ff4a0eb98072b19218f04f71495bd94341ae8880652a9f0b1b95a6fc0d62f9a69e2fa15051a430
SSDEEP

49152:6xyPRNW4OeheyUhYxyPOV4C8lx0VvROJHGHSh3XACsjO760Ys:eq3qOKvD0VJ4GHSxX1sm6Q

Score

N/A

Malware Config

Signatures

Files

77a1a4740fb40c48e9aa6bf39edd8959071a0eab6906d4e54d1a599c28c38038
.exe windows x86

c8f4ba6bbf38d76b7b52892d64055417

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetLastError
GetProcAddress
FindResourceA
WaitForSingleObject
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetStringTypeW

user32

CharToOemA
PeekMessageA

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ