b16226379c5bf19d68fb215c96e82f2d7a06133a0e02faf41387b0767717fb61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b16226379c5bf19d68fb215c96e82f2d7a06133a0e02faf41387b0767717fb61
Size

48KB
MD5

525b628c99a30178fd32d8e779cfb7ce
SHA1

e53f21d67757011094a51e157a0e48c22d3ff473
SHA256

b16226379c5bf19d68fb215c96e82f2d7a06133a0e02faf41387b0767717fb61
SHA512

065b34d86750f2461fa9d8a3327e9dacf328c8d484ea2a0c4ce8aca0135027205ef742f6010c6c8addf1cca0bf8a9d0cf47e496c3cba77c8f5cd87c56a86b67e
SSDEEP

768:UlTgP2ANyLp5XIFbR0uY25BQkLJlwt7Rx:UlTA1NI3W95B9otlx

Score

N/A

Malware Config

Signatures

Files

b16226379c5bf19d68fb215c96e82f2d7a06133a0e02faf41387b0767717fb61
.exe windows x86

bf56405bd43c0a2c3738c89f3ba9d397

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ResumeThread
CreateProcessA
GetCurrentThread
GetCurrentProcess
lstrcatA
lstrcpyA
Sleep
GetShortPathNameA
GetSystemTime
ReadFile
SetFilePointer
WriteFile
GetTempPathA
GetLocalTime
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
GetModuleFileNameA
ExitProcess
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLastError
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE