36aa301335a69ec2c31c5546182be49d035d0921c5c4d3504cf26cc0e8cd0b6f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36aa301335a69ec2c31c5546182be49d035d0921c5c4d3504cf26cc0e8cd0b6f
Size

76KB
MD5

96da16eb322e0bf35085aa03e9b36b57
SHA1

5af4818dfde42008cead4986227c2eb40a811ee1
SHA256

36aa301335a69ec2c31c5546182be49d035d0921c5c4d3504cf26cc0e8cd0b6f
SHA512

94d8c7eae658e7a93103361dfbc282829ae33d0b8f8671708ebb5adae5a7516155062c5a16184009014608a5451e9abbe2820e8a607dc39b1da4c4adeaf336ab
SSDEEP

1536:KDvuRO8naWDkHk8f7bMzbdZEYoQXy1DXekYz5PjEErxTWDTMqhGKYIZTET8x:KDvuROqSkQCboQMGPjBkMqhGKZTbx

Score

N/A

Malware Config

Signatures

Files

36aa301335a69ec2c31c5546182be49d035d0921c5c4d3504cf26cc0e8cd0b6f
.exe windows x86

bbfb04a1d3ab35b6090ae7e3c6fb22ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CheckRemoteDebuggerPresent
TerminateProcess
HeapWalk
EnumSystemLocalesW
GetNumaAvailableMemory
SetLocaleInfoW
SetConsoleScreenBufferSize
TermsrvAppInstallMode
GetCommMask
GetTimeFormatA
SetEnvironmentVariableW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE