cd13deea5805359eccdc98208873feb427250ef5c6c7bca9f08c1efde3c860f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd13deea5805359eccdc98208873feb427250ef5c6c7bca9f08c1efde3c860f3
Size

344KB
MD5

52a65774f1d49fb8eedb9a151182c65d
SHA1

48b0dde7f56dd4e98e142710a338f1ce5efd4d01
SHA256

cd13deea5805359eccdc98208873feb427250ef5c6c7bca9f08c1efde3c860f3
SHA512

084ce6493a73c3e0687a5b515c341faeddb9fff6a14735ad554f9d0eb138380f2ffc0035234bc174971d310d42315077eda7ec796406d97eb7d35ac35c84470a
SSDEEP

6144:4c6ZZclfqmPgNKS6+5o41/fXLadRTHV2bVhKirgtHQm4e7/iIJ0:456lfqmoN7XLO12bVhKiLlI

Score

N/A

Malware Config

Signatures

Files

cd13deea5805359eccdc98208873feb427250ef5c6c7bca9f08c1efde3c860f3
.exe windows x86

cf0c840c727c4e40934f34c9c4d7ffc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetCommandLineA
VirtualProtect
GlobalFree
DebugBreak
GetModuleHandleW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
Sleep
GetCurrentThreadId
DisableThreadLibraryCalls
GetModuleHandleA
GetStartupInfoA

msvcr71

free
strncpy
_c_exit
_adjust_fdiv
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_except_handler3
_exit

Sections

.text
Size: 328KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ