c13917547b4ef3380d0ff68878d847c2a7d66616b608f8d249ac944dfa3485d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c13917547b4ef3380d0ff68878d847c2a7d66616b608f8d249ac944dfa3485d3
Size

62KB
MD5

7532d0ed20828c81ce35e01abae82f56
SHA1

5ed207ccb66dfb86d416b4fe93a087e9c45df5fe
SHA256

c13917547b4ef3380d0ff68878d847c2a7d66616b608f8d249ac944dfa3485d3
SHA512

05546f86d87b441700d8e796c727861fdb83c952880717bab0e24bb253844186c106ab9194eb49a1ac2bc074cfaa6ab05d1c84a8e7c36554d4c767b6e2bfddac
SSDEEP

768:9jrgoP9z35dGodo8WYOBZjTAsl2Roq721VYUsTfAzdLBqhlzXUaZbJdmUHHnOPma:9Xt3YuROElToYw2gOVSZ1oFASKy704p

Score

N/A

Malware Config

Signatures

Files

c13917547b4ef3380d0ff68878d847c2a7d66616b608f8d249ac944dfa3485d3
.exe windows x86

5cdd625a195d8da8f6febff03bbc1964

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
WriteProfileStringA
GetVolumePathNamesForVolumeNameA
GetModuleHandleExW
SetTapePosition
DeleteTimerQueueEx
GetCurrentActCtx
IsBadHugeReadPtr
WaitForSingleObject
Heap32ListNext
IsValidLanguageGroup

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE