f79ad0539017135721b082570fe71d747787bb53f4d16cb90529c945eacda877 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f79ad0539017135721b082570fe71d747787bb53f4d16cb90529c945eacda877
Size

195KB
MD5

4009dba2670e18dc3bf8d53a68107599
SHA1

8b3e91ca50beb5ffe602685207e9667f8e9a47ca
SHA256

f79ad0539017135721b082570fe71d747787bb53f4d16cb90529c945eacda877
SHA512

f0398aefdf9d0b7d7ae78911ef918feff6cf77c8696740465fde8422d4555c38d5feb6f4aa972a383dd8ece0931a9f28d8c840820ca33e40091aef34acdd6b23
SSDEEP

3072:DXgnMZMAht0Nht4pr9NJWqrkuBIH4ax+9gnUhPSNNBeWlmdk3rNJ4tKZ8OuskQ:sCMOpLIqNBgPCweWlm+3BJ4YZUskQ

Score

N/A

Malware Config

Signatures

Files

f79ad0539017135721b082570fe71d747787bb53f4d16cb90529c945eacda877
.exe windows x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.E64E
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0AuA
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Fd9f
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE