d906b6bb995f9c32ec8c9c5ae9d0eba412e3bdc7142e9656a4743faa7aa2dcf0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d906b6bb995f9c32ec8c9c5ae9d0eba412e3bdc7142e9656a4743faa7aa2dcf0
Size

44KB
MD5

c99b0a9d65653ef9e666be5af02eb281
SHA1

2b01479a5919f32b24efaa2a265bfbfb2029850f
SHA256

d906b6bb995f9c32ec8c9c5ae9d0eba412e3bdc7142e9656a4743faa7aa2dcf0
SHA512

eb4db4cf19df7b43422b7e4518466e3224bb20be9d5124613aebe380619516a0321ce3bf4fefad7351ef8708e90f5b748d0803413dd161f85cfe23ecccf606cb
SSDEEP

384:eJozu3onWJjNICg6MunBRvL5TtpcyISvbJulImstOTW2dKhoq//k:M0WJxH/nn+yjMImsETW2dKhd/s

Score

N/A

Malware Config

Signatures

Files

d906b6bb995f9c32ec8c9c5ae9d0eba412e3bdc7142e9656a4743faa7aa2dcf0
.exe windows x86

9f7692594420feb5fa3053d53f5abca0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
OpenProcess
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetLastError
MoveFileA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetStringTypeW

user32

DispatchMessageA
TranslateMessage
SetTimer
GetMessageA

psapi

EnumProcesses
EnumProcessModules
GetModuleFileNameExA

shlwapi

PathFileExistsA

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE