abb42c947df46b2bd1418cb519014964f2e2afcfd46e96a5aa86037d3f16f318 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abb42c947df46b2bd1418cb519014964f2e2afcfd46e96a5aa86037d3f16f318
Size

1.6MB
MD5

838dc30bd3a0f9669d3fcc15dc04dba6
SHA1

66981eae84448964d1f08d801d38b8cb5bf2f367
SHA256

abb42c947df46b2bd1418cb519014964f2e2afcfd46e96a5aa86037d3f16f318
SHA512

ac441c795d20ffb185a80a00cf268fa7ab0a28a33d31b7de4871098e9c9c87598a0b82f81ef23d47a846b32c9f24fcf6a4ad287f9704e68802ced5f5e1ade680
SSDEEP

49152:3C1dpmp/HoWnJZh6tJEivfOdwlYj8g+FziCxei:y/odHoWXk5fVlYj8nxR

Score

N/A

Malware Config

Signatures

Files

abb42c947df46b2bd1418cb519014964f2e2afcfd46e96a5aa86037d3f16f318
.exe windows x86

d06e0e3e039c3a1c983e51c81e11d2c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr80

__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
_encode_pointer
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
__dllonexit
calloc

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ