a0118e664eb24bb9de41ff4e72155cdfee7f6cb5726765d7d2259d75b708249c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0118e664eb24bb9de41ff4e72155cdfee7f6cb5726765d7d2259d75b708249c
Size

7KB
MD5

eaa4178f348506e1f5578d52838135b4
SHA1

e7c36824e5084af497ad122cb999f29d65064bb0
SHA256

a0118e664eb24bb9de41ff4e72155cdfee7f6cb5726765d7d2259d75b708249c
SHA512

2ee91d7e92450f131afce45ffa0cf01daab150fda24c31d693a584bb7d879d7422c0f1ea29ce69acca53f5a094bb57a1e686857da7492dfae5c0ec094f2ad7ba
SSDEEP

96:TKsPokWHovv5tGX0vacoA8F3TSDyFcfKrGKt4v8PtboynR:TdIovvvjdoA7cGI4UP1oynR

Score

N/A

Malware Config

Signatures

Files

a0118e664eb24bb9de41ff4e72155cdfee7f6cb5726765d7d2259d75b708249c
.exe windows x86

b86a7b2756df6602e3b862f1bc12a641

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CloseHandle
GetLastError
CreateProcessA
GetStartupInfoA
CreatePipe
GetCurrentDirectoryA
GetModuleHandleA

msvcrt

sprintf
_ftime
time
_ftol
printf
sscanf
strncat
strstr
_itoa
atoi
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strnicmp
_exit
_chdir

ws2_32

select
send
WSACleanup
closesocket
ioctlsocket
connect
WSASocketA
WSAStartup
htons
inet_addr
recv
shutdown
__WSAFDIsSet

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE