974aab6e754a37a63454b288e866fcc90eab67f7fc684868f295a5cb0df7a7ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

974aab6e754a37a63454b288e866fcc90eab67f7fc684868f295a5cb0df7a7ad
Size

233KB
MD5

e523816574bd763e96010cb24a34792f
SHA1

163a7c28657806b0c69f2991d7ddbe3b5a5ccdd0
SHA256

974aab6e754a37a63454b288e866fcc90eab67f7fc684868f295a5cb0df7a7ad
SHA512

4d78864ae170fddcb058c2fbbd025567512872f844cbcff98a0bccf35cf4e8a14ccdc89b427820fed54ebe30fb3bb817d7307b4b3e54a60c08f3dc6151062c11
SSDEEP

6144:jiSvYj+EuYBNFHLQxhN+TS7hJ8vBi4ZHhhPv:WSQqEDcxhN+e7jMfvhX

Score

N/A

Malware Config

Signatures

Files

974aab6e754a37a63454b288e866fcc90eab67f7fc684868f295a5cb0df7a7ad
.exe windows x86

1ce89b1c0d017eb91b51fa14e1962b18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetStringTypeW

shlwapi

StrStrW
SHDeleteEmptyKeyW
PathSetDlgItemPathW
SHQueryValueExW
PathBuildRootA
PathCompactPathExA
PathRemoveBackslashA
PathGetCharTypeW
StrCatW

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ