ab6e3695e7a9dddf61723074ce2e4f8a6485ef9042add5cdb97465c73f989a4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab6e3695e7a9dddf61723074ce2e4f8a6485ef9042add5cdb97465c73f989a4c
Size

51KB
MD5

e467f9feb923d9b701aec5905b71db1d
SHA1

3efbc812ebc869f7374208dfc6e8230942c7d600
SHA256

ab6e3695e7a9dddf61723074ce2e4f8a6485ef9042add5cdb97465c73f989a4c
SHA512

a70f19697686bc0d1d5272236cb4421d3dbabf4ac5ed71c0522d0ad110db7f83b8614f396196ead9a6a4538fb35ec8babb31a87c2d928e4d862cc015b97ea1f2
SSDEEP

768:u71FFoJ8E/wG6B0oPy29B8WtBgfS2y1DH4HElcjXm43Au+x:u71FFoJLfa66tsS7YklGXrBI

Score

N/A

Malware Config

Signatures

Files

ab6e3695e7a9dddf61723074ce2e4f8a6485ef9042add5cdb97465c73f989a4c
.exe windows x86

5e86ce7d57e5a4b4ac2e74194d9a9d53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect
LockResource
LoadResource
SizeofResource
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapFree
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ