fab81f827d92b7ff3abeebe1e86773df23292cac0403c8cf582af39a4b304c65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fab81f827d92b7ff3abeebe1e86773df23292cac0403c8cf582af39a4b304c65
Size

298KB
MD5

7019f2832a2c826ec07ee92a2432ad80
SHA1

8fe34777c0242292164dd324210df55325908bc4
SHA256

fab81f827d92b7ff3abeebe1e86773df23292cac0403c8cf582af39a4b304c65
SHA512

998e1fd8a3397da83e4f199e2c5c3f095f089a454795f5247383cdb1d2a9c4466ae6768ddf73829fa21e4d1a9de2ec2f0698235b1e9c90410b6a501dddfb1715
SSDEEP

6144:9VPodEfG9u/Nj5XPQFwrbHQ5t1EvNVCXBH5AtaRQkTh9:9xgd9u/YFwreEvNVCX15AQRQkT

Score

N/A

Malware Config

Signatures

Files

fab81f827d92b7ff3abeebe1e86773df23292cac0403c8cf582af39a4b304c65
.exe windows x86

15c4dc1b6b77f39d27e64d453c611b1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetModuleHandleA
GetPrivateProfileStringA
lstrcmpiA
GetBinaryTypeA
EndUpdateResourceA
lstrcmpiA
IsValidCodePage
lstrcmpiA
TlsFree
CreateNamedPipeA
GetTickCount
GetStdHandle
lstrcmpiA
GetExitCodeProcess
Sleep
lstrcatW
lstrcmpiA
CreateWaitableTimerW
GetDriveTypeA
SetLastError
GetLogicalDrives
FileTimeToLocalFileTime

ntmarta

AccConvertAccessToSD
EventGuidToName
EventNameFree
AccFreeIndexArray

Sections

.text
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ