ff964af00cde1a9cf3900b84a74a660a8f0ba149288cda479d529b1b1bbb8140 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff964af00cde1a9cf3900b84a74a660a8f0ba149288cda479d529b1b1bbb8140
Size

44KB
MD5

255b86b09cde5b7239c65e45770c375f
SHA1

3cff30457980743f47574b1ab3a43ed813a026b2
SHA256

ff964af00cde1a9cf3900b84a74a660a8f0ba149288cda479d529b1b1bbb8140
SHA512

29a3b67abfd54576c3dd4a4850895b6ed078925bf93d507386912472d26e28b958fdec76f29c9f5a3555853a56bfeb24212ea1787644fd12dc68ce3334b7b991
SSDEEP

384:qSyC68f3ml0vG3PqNRvXm5+DdRQOhwQCJWaeolzyVGrdn2A3xfO6eiJATbi/wJ2g:tS8zlN/RNtCQTob5tIGHoJ2azPvQ88Fc

Score

N/A

Malware Config

Signatures

Files

ff964af00cde1a9cf3900b84a74a660a8f0ba149288cda479d529b1b1bbb8140
.exe windows x86

1860511a3f134a1bebefd274b158bd6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
FindResourceA
LoadLibraryA
GetProcAddress
GetModuleHandleA
SizeofResource
WriteFile
CloseHandle
GetModuleFileNameA
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetLastError
SetFilePointer
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ