windows[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

windows.exe
Size

33KB
MD5

3ce7cdbeaa2e5d51613f4ebba9131eb1
SHA1

edde61c895059af2632a2b518f40e8d39d5a16a6
SHA256

23c2ae8af8c09f82c4dc15b1e8181d6f9e946235937803a136f5f10ceba31264
SHA512

a07baa853d0cdf807952d5c15e57e0f9752743a6e614989aaa3fbb0e45b1b53bda922511643e4b3b4f672804e29a6277eb77cf9c937ce38da19b1b26d11555b8
SSDEEP

384:fnD2E4faBx6/fwfoAyrZ4NIi1xOmAhvLC3t6p5/QfP1bMhgW++fDmft+t7yN0eWh:fD2E4EYSoENIXCdM5/ibMZ+HB8t3oAv

Score

1^/10

Malware Config

Signatures

Files

windows.exe
.exe windows x86

99fa36acadae70c0689a07a11c733b0b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
MultiByteToWideChar
HeapReAlloc
HeapAlloc
VerSetConditionMask
GetProcessHeap
FindFirstFileW
FindNextFileW
GetStdHandle
WriteFile
WaitForMultipleObjects
FindClose
CreateFileW
ExitThread
Sleep
CloseHandle
GetDriveTypeW
EnterCriticalSection
ReleaseSemaphore
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateSemaphoreA
GetModuleFileNameW
GetSystemInfo
CreateThread
ExitProcess
LoadLibraryA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ