e7bfeb115873c4ee72abe272b3e35240c21d1aae11e15c73545013641d2c5762 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7bfeb115873c4ee72abe272b3e35240c21d1aae11e15c73545013641d2c5762
Size

93KB
MD5

0d0084972c6a8a10707fb4a167ce6c47
SHA1

e669b85f9ff4df0e55581f09579e1f08f9eeae80
SHA256

e7bfeb115873c4ee72abe272b3e35240c21d1aae11e15c73545013641d2c5762
SHA512

64c7cf6ecdfb0510f2c1f70d95a6e92a0340070426d4dc6ae3b75c03368a8fe03dfc65d4660007ec8cc28945fe1d2e4ff1dfdec9414310d07fbb8d646fb016af
SSDEEP

1536:PaltI42wfuVLkjJr4qq02QCs3Wae+Eaa7Vg0inzWPSxLuqT/QBwGc88Ht7SCB5F1:P2gUrUsmAEfVz8ImLucQKXVHtDBjW+Gm

Score

N/A

Malware Config

Signatures

Files

e7bfeb115873c4ee72abe272b3e35240c21d1aae11e15c73545013641d2c5762
.exe windows x86

9b4521fb7063b81c04377eef061bc488

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetShortPathNameA
DeleteFileA
lstrlenA
GetModuleHandleA
GetStartupInfoA

msvcrt

calloc
strlen
fclose
fwrite
fopen
malloc
memcpy
strcmp
strcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
strcat

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ