96d5ccc44f24f0e1a47cf234761a0a15f608136cf487defa2e4e0e0f4fa339cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96d5ccc44f24f0e1a47cf234761a0a15f608136cf487defa2e4e0e0f4fa339cd
Size

80KB
MD5

3e9baef8bba4f46019f821a5977b0bb0
SHA1

b5aef9af6b50978bf5e9be2de45e8cb6ca6d0ced
SHA256

96d5ccc44f24f0e1a47cf234761a0a15f608136cf487defa2e4e0e0f4fa339cd
SHA512

b6f8ce65f736e2f01fee6f391641d23eba38195059e5657363ba822f0502e236d55a522471d18f8766d748db38b0c72592cce3ff35d0b735ce7a16b3db3af86f
SSDEEP

1536:3wszEcPUjEeaNrBAczOTkduEu/wBc/11F2O/yFZ/Zc2HUgr82hW8fPL:3Z9rVzOYEQc/1O40ZGsTr8vYL

Score

N/A

Malware Config

Signatures

Files

96d5ccc44f24f0e1a47cf234761a0a15f608136cf487defa2e4e0e0f4fa339cd
.exe windows x86

46b5b624571e00339e2148722b2a9762

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lcreat
FindNextVolumeMountPointA
SetCommMask
GetCurrentProcessId
FlushInstructionCache
EnumDateFormatsW
GetConsoleAliasesLengthW
GlobalFix
DebugActiveProcess
lstrcatW
VirtualLock
BasepCheckWinSaferRestrictions

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE