4ce5a05371efff7a92cca7547203b25ef9c5937291ef99a45bd2eb5de2288e3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ce5a05371efff7a92cca7547203b25ef9c5937291ef99a45bd2eb5de2288e3e
Size

76KB
MD5

6a8df160b3c0fdcf8c13f524e76f28fc
SHA1

9363a161909e76ea720e87da5bc1e3039f0a6d1f
SHA256

4ce5a05371efff7a92cca7547203b25ef9c5937291ef99a45bd2eb5de2288e3e
SHA512

31939d9d739808b540c1fc850a2680b149df36185528963bb32ba27f529b83a990f5ff401da4ea9fe5e4ebc4cd547c49ddd74d42a6af29a0a6334a1800b672c1
SSDEEP

1536:5cYCEA0g0tAtT76qZzlzXnWS0MwYTCvwlTJ7VuTIWjEErxTWDTMqhGKYIZTET8x:5cYY0titT76qZzlR8YTEmTdVuZjBkMqR

Score

N/A

Malware Config

Signatures

Files

4ce5a05371efff7a92cca7547203b25ef9c5937291ef99a45bd2eb5de2288e3e
.exe windows x86

d259baef6088d44a4e7e403d54fc6187

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
GetTapePosition
SizeofResource
InterlockedPopEntrySList
VDMOperationStarted
GetFirmwareEnvironmentVariableW
HeapValidate
DeactivateActCtx
GetVolumeInformationW
SignalObjectAndWait

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE