c61f20d2d0627f309dd76d969aa301f811614bfbed9df17d680f385a7a840c0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c61f20d2d0627f309dd76d969aa301f811614bfbed9df17d680f385a7a840c0c
Size

119KB
MD5

678ed614b9157c5982182c7cde66ef50
SHA1

b6c2b9d171d0f8ba27c4a934bb82e36d4b0cf80e
SHA256

c61f20d2d0627f309dd76d969aa301f811614bfbed9df17d680f385a7a840c0c
SHA512

b44b18bd43e59d665aaa4a8248f26839084892ddd11cf5a6c5e6bab5b5578eec292ec53d67904568d16c74c12510a653e8c0078b771a504f3d584cdd53f38ce0
SSDEEP

1536:c8UZO8ouVJd9aEuCom/LY8/FBFar74ozqwACJuUx6ZvNioe94JPdgLIN1GIAiY4R:rHCRL1FxWx9uUxE894Fdye1GiY4gGbIU

Score

N/A

Malware Config

Signatures

Files

c61f20d2d0627f309dd76d969aa301f811614bfbed9df17d680f385a7a840c0c
.exe windows x86

1717fb814ac7a5ba8b675153efefe3fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapLock
GlobalMemoryStatusEx
VirtualBufferExceptionHandler
EnumResourceNamesW
LockResource
Process32NextW
DeleteVolumeMountPointW
WaitForSingleObjectEx
ConvertDefaultLocale
LockResource
DuplicateHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE