e28c8fa20dccde2d77cbf08225f91caaf5b97d4a0e69c488e5c4cec10c240d9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e28c8fa20dccde2d77cbf08225f91caaf5b97d4a0e69c488e5c4cec10c240d9d
Size

51KB
MD5

13bed72f9dbe7d856d1a05ce16d2baa6
SHA1

3796aa48be9a26834aa3625fe7c64e7332b943fc
SHA256

e28c8fa20dccde2d77cbf08225f91caaf5b97d4a0e69c488e5c4cec10c240d9d
SHA512

d96dc43228411c49373491fb8759e057ba0896b49b6f8bc570f58754600d5906955c7ebffefb33ea10c3bf13c4e03d979ad7aadfb0414375157f97fc25669f3b
SSDEEP

768:w1avkUO2PywiFXl+3NhU69NpNP37wRJlRf1nH5M1MnZuBk2Vmxw:1pO26flIw429dnHjQVmxw

Score

N/A

Malware Config

Signatures

Files

e28c8fa20dccde2d77cbf08225f91caaf5b97d4a0e69c488e5c4cec10c240d9d
.exe windows x86

e99c7b257527d40e20e5bfea29753a34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
EnumResourceLanguagesW
TlsGetValue
HeapAlloc
FreeResource
GetCommandLineA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetStringTypeW

user32

DestroyCursor
GetQueueStatus
LoadBitmapA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ