ARPPRODUCTICON[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ARPPRODUCTICON.exe
Size

64KB
MD5

9de05885085a952baabca0306ad01515
SHA1

f318327941164758e0c9a59e0f192ddd43bc98b1
SHA256

3f672f0bc73f4b8475fa63a35e4bf0923abb1ce1192cc7cd4ba89e1acb7727a9
SHA512

3edc0ba1210a33e501c4520fe4f1c505ee0b3ab7ff3758aaa1a57e226ec1821d0988291fce24efb60443c34f61337f1006b79bbe6ae870d27bf36c8aa541b17a
SSDEEP

768:pnkpTBPJn7qcnDcLZLs5ZRe9GlAn0vdvF25pl:p8f71cLZLsPMFn0vhF25pl

Score

1^/10

Malware Config

Signatures

Files

ARPPRODUCTICON.exe
.exe windows x86

4f5c6eb2e577003d67473ac2d4ca3f25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ