155d8b96b63cb281d14e91c632e71fe0d7a17aa03cfcfd57b9efbbca3b1aec08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

155d8b96b63cb281d14e91c632e71fe0d7a17aa03cfcfd57b9efbbca3b1aec08
Size

817KB
MD5

f563446f62942bef8676ab478d97faed
SHA1

9eca44584a16e8f4183b7ebba901c0cfb405d3cc
SHA256

155d8b96b63cb281d14e91c632e71fe0d7a17aa03cfcfd57b9efbbca3b1aec08
SHA512

4bbf937d652c3ca81e979045d66cf94d1dd4e5b5d5f3d66ab7cbd651e8786c5336cf6b224d5f411cf52364c486311afaba262629a47e1bc893a4f7b998799c1b
SSDEEP

12288:2TCYUDwBm2omaijTSuqysiRpPSXrcW9DVZSh7rkSGmx3hb+xjv3yNvQZdNk:IUD2omr6Rsh74SGmTb+x+NvEdNk

Score

N/A

Malware Config

Signatures

Files

155d8b96b63cb281d14e91c632e71fe0d7a17aa03cfcfd57b9efbbca3b1aec08
.exe windows x86

d8d68f87814e323f4a94e0d71442aa1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFullPathNameW
GetPrivateProfileIntA
WriteConsoleA
GetCurrentThreadId
VirtualFree
SetThreadPriority
DeleteFileW
SetLocaleInfoA
lstrlenW
GetStringTypeW
GetModuleHandleA
TlsGetValue
SetCurrentDirectoryW
TlsFree
VirtualProtect
FormatMessageA
GetModuleFileNameW
lstrcpynW

apphelp

SdbReadDWORDTagRef
SdbReadDWORDTag
SdbReadBinaryTag
SdbReadStringTag

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ