36fadd0b56347c8ed934b84b641200f3808ed76d26a4ab5c7619224ed9aeb1fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36fadd0b56347c8ed934b84b641200f3808ed76d26a4ab5c7619224ed9aeb1fa
Size

76KB
MD5

c2ff58a9874acd6949d2cfccf2afc9d4
SHA1

a3f42c68e2bf46f9fc98c062a173e072fcf31445
SHA256

36fadd0b56347c8ed934b84b641200f3808ed76d26a4ab5c7619224ed9aeb1fa
SHA512

5cb3216ffd67a655d35c20ffa5b8271071ed592abac21f0b04b69575c52686d949eb48b1b0ca4d0effa9244b53ff3636e7df218ab53638294c7e380d6fad3632
SSDEEP

1536:gLi97yDHEke/JcoKEFdy9wBplz1dKEgsmc1VrlC2nEppjVrs2ryrd1vUQuq6:oidyDHEke/JcoKETyKBplz1dKl4U2nER

Score

N/A

Malware Config

Signatures

Files

36fadd0b56347c8ed934b84b641200f3808ed76d26a4ab5c7619224ed9aeb1fa
.exe windows x86

fe11f873e11f185a4453f0f00fee638f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
LocalLock
VirtualQueryEx
lstrcpy
SetClientTimeZoneInformation
GetConsoleCommandHistoryA
VerLanguageNameA
InterlockedExchange
CreateProcessInternalWSecure
lstrcmpiA
GetHandleInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE