e81106d44ae2406def52fe6a0d631535cf690becb8e24dcd5052360462283e39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e81106d44ae2406def52fe6a0d631535cf690becb8e24dcd5052360462283e39
Size

3.3MB
MD5

9f706b6f2d1315d27d7a5410454cdbf4
SHA1

e180382cbcebe7984a1b564a266f693d4402ef63
SHA256

e81106d44ae2406def52fe6a0d631535cf690becb8e24dcd5052360462283e39
SHA512

cda9e0a2984f18bd04362ffb139f2c1cd4e38b97d3c6469e704990e10c73a4da016a1a1d7f93459b3e8a67e4ccc42b22e7846a9915c965ae9e76cdb002d226e2
SSDEEP

49152:CEbk27dklbH2jotkVO21f7u54xQ8IYn4oBkX1EOEt7jawni:jF7dObWrx1ju54xQ8IVHX1Qjs

Score

N/A

Malware Config

Signatures

Files

e81106d44ae2406def52fe6a0d631535cf690becb8e24dcd5052360462283e39
.exe windows x86

ab61160b706d49d5bef888da51411531

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

GetSystemInfo
VirtualFree
CloseHandle
CreateFileA
ExitProcess
GetFileSize
GetModuleFileNameA
VirtualAlloc
ReadFile
SetFilePointer
WriteFile

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ