ff5877f430f81017fdaef3e78906b034d190e19aa11cf99add3562f831e7d9e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff5877f430f81017fdaef3e78906b034d190e19aa11cf99add3562f831e7d9e4
Size

186KB
MD5

6ec83c60aa5d829f172f1cd3dfd81845
SHA1

c118a52406c58b9243b012dfde9c1520208845a9
SHA256

ff5877f430f81017fdaef3e78906b034d190e19aa11cf99add3562f831e7d9e4
SHA512

d77c04fba0a3a54531a4a5df15cbaf04ffb1f6a9664dbcf3f80551130ae704fb7127958df7a4629a395450141a51cf204a9b37fb94e547116d5d98974cd29720
SSDEEP

3072:rMpkylkHnuco1rV6N4ynYK0ZMNEkSQq/sMpkylkHnuco1rV6N4ynYK0ZUNEkCYrZ:IpkbHnuR1rV04ynYKJELhpkbHnuR1rVm

Score

N/A

Malware Config

Signatures

Files

ff5877f430f81017fdaef3e78906b034d190e19aa11cf99add3562f831e7d9e4
.exe windows x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE