cfebe7369b6d324154a7b5cb672f03ec4f77a81ed583222b96cb818236276318 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfebe7369b6d324154a7b5cb672f03ec4f77a81ed583222b96cb818236276318
Size

343KB
MD5

144d700c8f7e70a3110571b1af7d32b5
SHA1

eba5bf3465f3b529e8fd55b5856f822b4b59c77b
SHA256

cfebe7369b6d324154a7b5cb672f03ec4f77a81ed583222b96cb818236276318
SHA512

d624f2588c876c3ff74a9e587176a73f718eaf4bd28da924ef855ae666bdfa5a08d3d29df0e318aa6ae5a8a2f1d5cffdb195fa24f2ec45cbe06dd88292abb3bb
SSDEEP

6144:t/Zmu9mEF8jLi8upywBw6eiVqGMsxWw55nZo1OOrMiJq1dn5OzKiq5c9:ttUjqpyXPyWw5lZo1OaMKqfn5O7z9

Score

N/A

Malware Config

Signatures

Files

cfebe7369b6d324154a7b5cb672f03ec4f77a81ed583222b96cb818236276318
.exe windows x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 15KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ