97c19d2d9d5a2e4eb36937820f44b72e430c00e2c745a4aa191c50433a23147a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97c19d2d9d5a2e4eb36937820f44b72e430c00e2c745a4aa191c50433a23147a
Size

33KB
MD5

6b4fde25fe69dc87dbb3d32fe0e4f071
SHA1

5bbc3d0329d6ac3ea8e85954289d19e61ffc9d7f
SHA256

97c19d2d9d5a2e4eb36937820f44b72e430c00e2c745a4aa191c50433a23147a
SHA512

896aa17800b2041c393301dbd03e1c75bafb40e1a2848ca303640b1a656cea473281389a6dc1736c4427a97585d14da5b8f928e6c78da854e16c99a6637f6edc
SSDEEP

768:WzsDmEvh9UHyS10iDqmvHd9zcZgPdHy/axUU9DCZLNC+L1d1cnOYkBtvJ:QsDV5+ygdPfxF9DsLNC+j4kJ

Score

N/A

Malware Config

Signatures

Files

97c19d2d9d5a2e4eb36937820f44b72e430c00e2c745a4aa191c50433a23147a
.exe windows x86

207598c25991e29f2b31bc6b9e43d2e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
MapViewOfFile
OpenJobObjectW
SetVolumeLabelA
EnumSystemLocalesA
VDMOperationStarted
FindNextVolumeA
TermsrvAppInstallMode
GetCalendarInfoW
OpenProcess
GetVDMCurrentDirectories

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE