952d3782bf257a61da66e92866c18c23630544fe79643e94b237f0664f44e983 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

952d3782bf257a61da66e92866c18c23630544fe79643e94b237f0664f44e983
Size

491KB
MD5

6869bdae0fd99e6ae8f1275e5dfb61a0
SHA1

0af46c95268db06c970568f32c43e83bcbd6bb79
SHA256

952d3782bf257a61da66e92866c18c23630544fe79643e94b237f0664f44e983
SHA512

27daaada6ce5187b0bda50b453afbe62e14d249f80a38a47ccb34dde4afd44dfd138676cd090e419c8695f787fee0d6916cf1b2e63c5937bdf40f4cc90d12440
SSDEEP

12288:IzplLkjvlJaUuPnvsNNtSq5aw4Ef0kbocxzot76YKnkD9:Izp2laPnvsNNawvLc29YakD9

Score

N/A

Malware Config

Signatures

Files

952d3782bf257a61da66e92866c18c23630544fe79643e94b237f0664f44e983
.exe windows x86

02a3c51cf0da370a14105a2538a2ab12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumerateLocalComputerNamesW
GetPrivateProfileSectionW

user32

GetDialogBaseUnits
GetProcessWindowStation

Sections

.text
Size: 484KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE