7afeabf8a853afe2fd5c4dd152c445ebdb3ddf2913596c89836610af3bef6cd6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7afeabf8a853afe2fd5c4dd152c445ebdb3ddf2913596c89836610af3bef6cd6
Size

119KB
MD5

4ff18b784bb171741880128265f14aa1
SHA1

6a927ad09ee4c95ea5b8a5631fdf99e2fe6c79a9
SHA256

7afeabf8a853afe2fd5c4dd152c445ebdb3ddf2913596c89836610af3bef6cd6
SHA512

9b34475a39ee136e980ebb1330958a1b261239790775529e572a7abe093af85eb7129129a5d950676f8fa7d411d05560a6f717aa0cac2b7eac5ddebc628fda24
SSDEEP

3072:dyXuTX3GLtRdWxkXcAzAxvfXhrHs2qxnC:seK3UxyApfF

Score

N/A

Malware Config

Signatures

Files

7afeabf8a853afe2fd5c4dd152c445ebdb3ddf2913596c89836610af3bef6cd6
.exe windows x86

9f77ea9b154f4bdf106f1e110179e945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemRegistryQuota
GetStringTypeA
TerminateThread
CreateFiber
CreateProcessW
IsValidLocale
OpenWaitableTimerW
SwitchToFiber
GetVolumePathNameA
LoadLibraryExW
CreateDirectoryExW
WriteConsoleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE