660782f8b529986b212b859dde06d77acdd93501a90d63b71e490b5a10817f08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

660782f8b529986b212b859dde06d77acdd93501a90d63b71e490b5a10817f08
Size

63KB
MD5

444696b3ad5b9a148721732c0a5f7a9b
SHA1

960ef0e22ac9c037aded664f9490b79ed23c3215
SHA256

660782f8b529986b212b859dde06d77acdd93501a90d63b71e490b5a10817f08
SHA512

42925039e0e7ea79fdce3a777f6854c529a10f8226bc9cd2a7264bc8a2c2d9364e7b3db29d6435cc52c8dd729264bfedbb7dbc0ec2888e5b96b31e9cab51f3a5
SSDEEP

1536:/XmXXl7UMdfKbwiFVE7/ZcHp2T5cYaoXRo0I6tk8FwK0e:/gVHd6wV7/KHp+y0w8f0e

Score

N/A

Malware Config

Signatures

Files

660782f8b529986b212b859dde06d77acdd93501a90d63b71e490b5a10817f08
.exe windows x86

14627e9886169a88dd7cec3f0a25dafd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeNameForVolumeMountPointW
WriteConsoleW
GetComPlusPackageInstallStatus
SetConsoleTitleW
EnumUILanguagesW
RtlUnwind
EnumerateLocalComputerNamesW
ConvertDefaultLocale
VDMOperationStarted
GetModuleHandleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE