36f6969f6d2a183b46626934c1870942880f7523373ce66a3891f28bd56fa492 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36f6969f6d2a183b46626934c1870942880f7523373ce66a3891f28bd56fa492
Size

63KB
MD5

b20e1cc3cfd0ed5835d70264bae816bb
SHA1

3f5edb3c282a7a8fcb8697a018796ddf60a84cc6
SHA256

36f6969f6d2a183b46626934c1870942880f7523373ce66a3891f28bd56fa492
SHA512

8127c8befa30196700c8a4db5f724e2a8ed114a59ecbe3cb752bdb6e2ed086bd4449b67c85e4d9e035cf995f4fa04bac78e6d1b88b44552abae478cfc81eac9c
SSDEEP

1536:EdsM/jfmT0trPnFvY4dDU0TAOeDvhnnMls+Tvlu4Q717ZAiZyE8I7QqNL:EF/S09nFv1dtghuvMl1J37Qs

Score

N/A

Malware Config

Signatures

Files

36f6969f6d2a183b46626934c1870942880f7523373ce66a3891f28bd56fa492
.exe windows x86

a4837c0e1a7fcae0680bdac4110ec169

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlen
LCMapStringA
VirtualAlloc
CreateTimerQueueTimer
SetHandleCount
EnumResourceLanguagesW
LoadLibraryW
UnregisterWaitEx
FindFirstFileExW
ProcessIdToSessionId
GetWindowsDirectoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE