96b8779e510e87257a94751f14dd5a04683fa7fac97f3dd64bde771d34356b02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96b8779e510e87257a94751f14dd5a04683fa7fac97f3dd64bde771d34356b02
Size

501KB
MD5

652e277daad2490a137533254a3f83a0
SHA1

37f487f1bd4e64410c07362e5b0a1a2627960207
SHA256

96b8779e510e87257a94751f14dd5a04683fa7fac97f3dd64bde771d34356b02
SHA512

dfd869c11ca4ae2f08f4438954ad01f0900cdeb6e1e77488262533875c8baa2f6d1aefe39d1c4761b40b0ad041ff0def7010943ea07d0705ac798894d62c7a3c
SSDEEP

6144:SK/xmP90/wguJpVopIM/eiG3cE9bAxsfW7qz1jC84PXJcKK8dz5CnezFOHP9DgPa:PmP91jJ7oaz33O6euNC8+Zwp5k6

Score

N/A

Malware Config

Signatures

Files

96b8779e510e87257a94751f14dd5a04683fa7fac97f3dd64bde771d34356b02
.exe windows x86

8a29d6242e51ebca2ac7071d0e5a557d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHandleCount
GetCurrentProcessId
InterlockedExchange
DeleteVolumeMountPointA
VerSetConditionMask
EnumTimeFormatsW
SetEvent
ReadConsoleInputW
ConvertFiberToThread
GlobalGetAtomNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE