be797eaf03695421825c5a87bb61e40b536bba4d017966a94fbc6f7f5c7fd359 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be797eaf03695421825c5a87bb61e40b536bba4d017966a94fbc6f7f5c7fd359
Size

61KB
MD5

638e8b39d7f91af09497dbcc2c71079f
SHA1

d2c6d4168db788faef2089babb1ade4f3713fdf5
SHA256

be797eaf03695421825c5a87bb61e40b536bba4d017966a94fbc6f7f5c7fd359
SHA512

ae5aabb6250c18e94a9254fec582bf231249829aea30f0aa49de12d77943c46343e50584f3f97ef7633320098d3c7d5ef32e613e4174bc7ef223e3b4381eb73d
SSDEEP

1536:Dub/iPQALjQajPpzJfjFiPqMNC6gdTVlWBUbp7nhgmBfh:Dub/KQALjhjP3BMN5gdTuBUbpLamBfh

Score

N/A

Malware Config

Signatures

Files

be797eaf03695421825c5a87bb61e40b536bba4d017966a94fbc6f7f5c7fd359
.exe windows x86

4a00ea8d1926bfe64b8208fe1a4cb9e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
GetVolumeNameForVolumeMountPointA
GetNumaHighestNodeNumber
GetCommState
SetSystemPowerState
LZDone
LZInit
ActivateActCtx
_lread
LocalLock
EncodeSystemPointer
GetSystemTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE