c015a1787f82cfe80e8a5e2fd0b1095baa1828ed2152736a2550348b8f67a27c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c015a1787f82cfe80e8a5e2fd0b1095baa1828ed2152736a2550348b8f67a27c
Size

139KB
MD5

af40348c5080bd38421d919be3345059
SHA1

069d2df65bec02f208b95c135eeb29cea82addca
SHA256

c015a1787f82cfe80e8a5e2fd0b1095baa1828ed2152736a2550348b8f67a27c
SHA512

52363d22a54329a1f761cedb4bded34f4c8066b7b15260d8cf3e955a11a6b5a8625691f0cbc435e0c99748d91423841ad52b070cc3fedea72e26d4c7e2b7e5f3
SSDEEP

768:NsNm6jOfAQcDtpGXL+J20kk+xrsa+Uvmmk5jPl:mNHKAQcqmmn+UvmPz

Score

N/A

Malware Config

Signatures

Files

c015a1787f82cfe80e8a5e2fd0b1095baa1828ed2152736a2550348b8f67a27c
.exe windows x86

a2d2fa29f218fae813dfc41da78fcd92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
Sleep
GetLocaleInfoA
GetStartupInfoA
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xqbalus
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE