61838ad717f692532159e10399b6ba3bcd76b6f0d64adda61bedd6df01bee855 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61838ad717f692532159e10399b6ba3bcd76b6f0d64adda61bedd6df01bee855
Size

338KB
MD5

ba0bb4c3ad758f6947d457934157ffae
SHA1

ce6d52f8047972dc19defeef5b762993765fad2b
SHA256

61838ad717f692532159e10399b6ba3bcd76b6f0d64adda61bedd6df01bee855
SHA512

9ebe3ea062c0b05c09b8c63f8f9cd7dce0db741188e2dfe53ead3c7faa3b4334e5e72741b7a8c62812f7199cbc41b4c5ee8db8862683194cf853801fbc00dc65
SSDEEP

6144:PU+ivE76Q3oqYlc+gWF0mjbQXPRjredaLx/vU8h6vsmSQdDr7F6eCm:MERJ+Y2pjc5jreWVJIvf5dr7Ft5

Score

N/A

Malware Config

Signatures

Files

61838ad717f692532159e10399b6ba3bcd76b6f0d64adda61bedd6df01bee855
.exe windows x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 328KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ