527d79a784bb1a94b88b4cd9f850e532f05d2157237c1a590623d25162e4e3c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

527d79a784bb1a94b88b4cd9f850e532f05d2157237c1a590623d25162e4e3c1
Size

227KB
MD5

0231f12ada20ede8edf2408ffe8f79d0
SHA1

f79db16f363e5ee24d3ae00210cfc3fc6c1c24ec
SHA256

527d79a784bb1a94b88b4cd9f850e532f05d2157237c1a590623d25162e4e3c1
SHA512

41644b06cc3f03120857360ca9a4ffafdde6200dacc214326a354dc6f40f82d2da7b620ee5d44c6688b9aee06612e0b42c30267985ef3c459b02969d72a85ab9
SSDEEP

3072:a+CwD0VF9k7uFLP54cUDT81vShM6nd1YiVfdboiVH0LZQ/IhkduCPBbStEQeV5I7:3CA0VQ7u95msvSnTfoudeCPBbe

Score

N/A

Malware Config

Signatures

Files

527d79a784bb1a94b88b4cd9f850e532f05d2157237c1a590623d25162e4e3c1
.exe windows x86

3bfbddbf65b423388bb3e4a8b5827ef2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
Sleep
GetSystemDirectoryA
VirtualAlloc
GetCommandLineA
VirtualFree
OutputDebugStringA
GetModuleHandleA
OpenFile
GetWindowsDirectoryA

msvcrt

_except_handler3
__getmainargs
exit
__p___initenv
_exit
_controlfp
_initterm
__p__fmode
__setusermatherr
__set_app_type
_XcptFilter
_adjust_fdiv
__p__commode

Sections

.text
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ