dfb44deb9e174937d85581397090a5991c5832db70d46be9104ea1cf09c567f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfb44deb9e174937d85581397090a5991c5832db70d46be9104ea1cf09c567f2
Size

41KB
MD5

b8dc26654ae0b5b2ac86ee3152a23bb5
SHA1

ac753b440de6cace633458931dee4c68dbe338c5
SHA256

dfb44deb9e174937d85581397090a5991c5832db70d46be9104ea1cf09c567f2
SHA512

e25917812cba2762afbb831d674f09053153365ce1d8384dc7ad48f8875d7cbc9c88243cdbffd2b07708271c234237852bbbedf3bca3122c7b635230071f7891
SSDEEP

768:mU7ZotlKYlkt8UxToeh0GjHiDKfdH3NoS:b7ZOlK8ktxoeVjRfLB

Score

N/A

Malware Config

Signatures

Files

dfb44deb9e174937d85581397090a5991c5832db70d46be9104ea1cf09c567f2
.exe windows x86

010f012d5a55e1e96593b2cbd811a35d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
FindResourceA
GetProcAddress
LoadLibraryA
SizeofResource
CreateMutexA
OpenMutexA
WriteFile
CloseHandle
GetModuleHandleA
GetModuleFileNameA
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetLastError
SetFilePointer
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ