f3799267643b7b8c93b60bbc48421eb2a78e8cb542e15b49f3d1325b7b58797c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3799267643b7b8c93b60bbc48421eb2a78e8cb542e15b49f3d1325b7b58797c
Size

434KB
MD5

54fd83a76437989c0bd6f44c034501ab
SHA1

60c735bc81297fa9b67fbf74f1bb3565dd7910dc
SHA256

f3799267643b7b8c93b60bbc48421eb2a78e8cb542e15b49f3d1325b7b58797c
SHA512

0f1803d1fd6a45f57b7c52f56b113cbd74c3fbeb96be588aadf7cda10383cac670afc5c45f7f2f83f32785b6d9221187e7ca2f675ba66e1f525149002d8de88d
SSDEEP

12288:FZLO0hF4F13DXNqUAl/0E4js7mwwHou8G9:7LOS4f3DMX/Cj4w+K

Score

N/A

Malware Config

Signatures

Files

f3799267643b7b8c93b60bbc48421eb2a78e8cb542e15b49f3d1325b7b58797c
.exe windows x86

e90234fc8ba983bd7976dbf87ae5fe72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
lstrcatA
lstrcpyA
GetTempFileNameA
GetTempPathA
CloseHandle
ReadFile
SetFilePointer
GetFileSize
CreateFileA
GetModuleFileNameA
ExitProcess
GetStartupInfoA
GetCommandLineA
GetModuleHandleA

user32

CharNextA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE