d0261a588a6864bb1a7d81538c68767308b5d685d26a3733a781d32d1b1550df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0261a588a6864bb1a7d81538c68767308b5d685d26a3733a781d32d1b1550df
Size

40KB
MD5

d9935c64b4ea208f55b642c8f1874f37
SHA1

dffe7b581a1931e154f79761c6baa9e25a94d19f
SHA256

d0261a588a6864bb1a7d81538c68767308b5d685d26a3733a781d32d1b1550df
SHA512

6d6d6023e692b79ac1498804041dc5b622ed200a9f9c4222289302a5824af9fda956ddb7a46a6694ab25e2203617737e93ab57bea24878b229dc4f3c918356cd
SSDEEP

384:iTqEohDV6u9Iy4E7JWv+7JIBZ8CtgWmueOSKufw0l9LCKiqO7pjU:nI2CnhauJSfb9zSU

Score

N/A

Malware Config

Signatures

Files

d0261a588a6864bb1a7d81538c68767308b5d685d26a3733a781d32d1b1550df
.exe windows x86

cb4072b12b053179f75a8bd14b689e89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
SizeofResource
FindResourceA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
DeleteFileA
GetLastError
GetModuleFileNameA
GetModuleHandleA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
SetFilePointer
ReadFile
GetFileSize
Process32Next
Process32First
CreateToolhelp32Snapshot
ExitProcess
TerminateProcess

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE