39b0da596aa127b4f06e815d4ae26f96029690fca1aa25e64fefdfc212f624f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39b0da596aa127b4f06e815d4ae26f96029690fca1aa25e64fefdfc212f624f9
Size

80KB
MD5

13a2884b50436f74977d57f313e01451
SHA1

a041a71664a0eb239ba020110294c1546c97f5e2
SHA256

39b0da596aa127b4f06e815d4ae26f96029690fca1aa25e64fefdfc212f624f9
SHA512

3ea044a3ee5789af7890c5425bc751477b207d9ab53f56dbcb01250c0cab35995744ebbdf33dde73bbf46bc5fc2ee35058c2e6d111829bac3d89d7627cc071e8
SSDEEP

1536:RiE8jqLFl5sH7CH8CKxSiIuluVVS02LiAQNYCotWq82hW8fPL:PdLFsH7CcCKx4Sb7ghgWq8vYL

Score

N/A

Malware Config

Signatures

Files

39b0da596aa127b4f06e815d4ae26f96029690fca1aa25e64fefdfc212f624f9
.exe windows x86

6fc4af46f4df35fd5e68387f66605f6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetNumaAvailableMemoryNode
FindFirstChangeNotificationA
DeactivateActCtx
GetStringTypeW
GetModuleHandleExW
DeleteTimerQueue
GetBinaryType
GetEnvironmentVariableA
GetComputerNameExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE