65708afc24d2a2bd5d46869f09399ba6ba6aa50f159b63d2fb4d3281f70ddd51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65708afc24d2a2bd5d46869f09399ba6ba6aa50f159b63d2fb4d3281f70ddd51
Size

501KB
MD5

6fb0a13a20334c78c7411885121e5a20
SHA1

91df4c849b1c306248021d6c778a9770cfa59a04
SHA256

65708afc24d2a2bd5d46869f09399ba6ba6aa50f159b63d2fb4d3281f70ddd51
SHA512

163796e2d5f21ca58804bef0af41375102d03ac6aa717217a26fbee562f233ecf8f6365352ec3aca59079bec53d1e84ae3b90f845ad544fa0e4a90a14bf4cfdc
SSDEEP

6144:R5EPSp/wguJpVopIM/eiG3cE9bAxsfW7qz1jC84PXJcKK8dz5CnezFOHP9DgPHj2:oqqjJ7oaz33O6euNC8+Zwp5k6

Score

N/A

Malware Config

Signatures

Files

65708afc24d2a2bd5d46869f09399ba6ba6aa50f159b63d2fb4d3281f70ddd51
.exe windows x86

fabecb2cf3fcfa804570ae2619a1eba9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenWaitableTimerW
GetConsoleKeyboardLayoutNameW
OpenFileMappingA
ConvertThreadToFiber
GetVolumeNameForVolumeMountPointA
IsValidCodePage
EndUpdateResourceW
EnumSystemLanguageGroupsA
VerifyVersionInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE