2f10ed6955f5ba441ac3f6febc4e12e0b6560b4adca092ebfe18e136914292d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f10ed6955f5ba441ac3f6febc4e12e0b6560b4adca092ebfe18e136914292d5
Size

3.6MB
MD5

6094a723e7a51f9d9fac536d0f524414
SHA1

b6618e92a8677393a04e602194001455611dfd17
SHA256

2f10ed6955f5ba441ac3f6febc4e12e0b6560b4adca092ebfe18e136914292d5
SHA512

3d829ee3133750af7b9cd76dd6e102398676aeb586263124da2d8a7030450f85ae7e8a8b6afadfb0f297a6375a1f2e810f50ab96b34e0c327789ac577e286d34
SSDEEP

98304:Fah0NNDsuP2TBYPH+hlwEWcjbDnMFYojgabewo/r6tiEXlN193h:e6DsJ8HWlnN3DnsxJiE1J

Score

N/A

Malware Config

Signatures

Files

2f10ed6955f5ba441ac3f6febc4e12e0b6560b4adca092ebfe18e136914292d5
.exe windows x86

20de7471fdf71f91bc692ee85984b73e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetCurrentProcessId
GetDriveTypeA
GetFullPathNameA
SetFileAttributesA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
GetVersionExA
GetTickCount
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetModuleFileNameA
ReadFile
GetFileSize
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
memset
strrchr
strchr
??3@YAXPAX@Z
strlen
??2@YAPAXI@Z
__CxxFrameHandler
strcmp
malloc
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
strcpy

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ