0a0b9ef82b5eaa1564b1da80a314fe1bf809062ed1c0bf9b724ee9d0b495caa4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a0b9ef82b5eaa1564b1da80a314fe1bf809062ed1c0bf9b724ee9d0b495caa4
Size

208KB
MD5

73af2e823b68bd71b119f50e471e6a5d
SHA1

e11bc9f770cd775877ccf599e6260003a7f120ff
SHA256

0a0b9ef82b5eaa1564b1da80a314fe1bf809062ed1c0bf9b724ee9d0b495caa4
SHA512

4e961ee0a892b533892bcf63762dd7b3768855a2b3ca8f445cd804d76188047a853678eb8703aeb4bab3433d6470db23141fb5afc7328f7fbeb7d2b7f79e5762
SSDEEP

3072:OQhZkOLfuDg0PtOqzKONqsEykRLSDbob2LBLARnXaC9QtKNk44a0wCQzMVz+:cOFStZzKqqsE6QCCRnXf9ae90wloV6

Score

N/A

Malware Config

Signatures

Files

0a0b9ef82b5eaa1564b1da80a314fe1bf809062ed1c0bf9b724ee9d0b495caa4
.exe windows x86

96136114f39573f44bf8fa9942074445

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
VirtualAlloc
Sleep
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

memset
realloc
free
??2@YAPAXI@Z
memcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
strlen
_stricmp

Exports

Exports

Hai
wuhen

Sections

PAGE
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ