11bb2dd4f59412340616c637d40dcf0cacba0384f60b33163c7620f6614fdbce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11bb2dd4f59412340616c637d40dcf0cacba0384f60b33163c7620f6614fdbce
Size

832KB
MD5

64344878b0e69fa61276fb74ad525cf6
SHA1

caecb369f277d829f2bdbbc41b4791ea1689e4a7
SHA256

11bb2dd4f59412340616c637d40dcf0cacba0384f60b33163c7620f6614fdbce
SHA512

ec6e55ecfb31c76ce6db645c9d625e624878226923218f99f34b899af71328e52718cb5799ee48d06b54e70371744f0a1b660788bf69fa4320615a5065ee8c7c
SSDEEP

24576:2f/+3bsvd3a29QeqqYOyHS7V3V9uQZ4N:W/Pz9QeqJ+OQ+

Score

N/A

Malware Config

Signatures

Files

11bb2dd4f59412340616c637d40dcf0cacba0384f60b33163c7620f6614fdbce
.exe windows x86

926278c9e69dfa15646e841adbc4c7c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetEnvironmentStringsA
GetBinaryTypeA
SearchPathA
HeapCreate
FreeEnvironmentStringsA
SetStdHandle
MoveFileExW
GetProcessVersion
WaitForMultipleObjects
OpenMutexW
GetDiskFreeSpaceA
CreateEventW
SetLocaleInfoW
LoadLibraryA
GetFullPathNameW
OpenSemaphoreW
SetCurrentDirectoryA

msctf

TF_CreateLangBarMgr
TF_CreateCategoryMgr
TF_RunInputCPL
TF_CreateThreadMgr

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ADATA
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_MEM_READ