2b5bee9448ce1c2033af779fe9c030f3f554a8187ab1316df7a288e4749aa463 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b5bee9448ce1c2033af779fe9c030f3f554a8187ab1316df7a288e4749aa463
Size

2.1MB
MD5

a101b214fe5ab8b0bedc55ca10da6650
SHA1

7afe998dd64dd2cca1a6f347774725302aa91d82
SHA256

2b5bee9448ce1c2033af779fe9c030f3f554a8187ab1316df7a288e4749aa463
SHA512

be8229947fa125fb8a22953461668351bbf57cd9834ab314dc9d3d3e258e49bfa88d7c8a363846bd3aef773adcc52bb48fab0af47ae6680983d079909d0575ea
SSDEEP

49152:AZ7yn2uvLUewT3HYld0Or1ynD8lGMdIMpMRo2w1uEvVqr7:AN9uvLBwT34tIDQaMeK31uLf

Score

N/A

Malware Config

Signatures

Files

2b5bee9448ce1c2033af779fe9c030f3f554a8187ab1316df7a288e4749aa463
.exe windows x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ