0b514840e0a04f69c5b763c541b8f2a5329e78fec8036e34060f78d8c5935b31 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b514840e0a04f69c5b763c541b8f2a5329e78fec8036e34060f78d8c5935b31
Size

832KB
MD5

4633fbb7501780c2d096b599688a0aa6
SHA1

8886c14fe61cfb0e973ae74b413950fcc523dc37
SHA256

0b514840e0a04f69c5b763c541b8f2a5329e78fec8036e34060f78d8c5935b31
SHA512

bae14ae967621c39250e27ad0401f899010606b1b26c8197db735d13e8a4a8702eb7c6385b6d377a69cc5388ff0203784eb0f57a25419f5197fcb7338d5dd327
SSDEEP

12288:Nu44G5TdQx5l079U9GvnnD/fCVpG69ovgPdZom0ib+xJxSmMRKp6HR:NXTMa+CWH93dBDGvp6x

Score

N/A

Malware Config

Signatures

Files

0b514840e0a04f69c5b763c541b8f2a5329e78fec8036e34060f78d8c5935b31
.exe windows x86

682ee52a968b152799eb5eee0496611f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetLocaleInfoA
GetProcessVersion
WaitForMultipleObjects
OpenSemaphoreW
GetCommandLineW
SetStdHandle
GetFullPathNameW
SetCurrentDirectoryA
MoveFileExW
CreateEventW
LoadLibraryA
GetDiskFreeSpaceA
SearchPathA
FreeEnvironmentStringsA
GetBinaryTypeA
OpenMutexW
VirtualAllocEx

msctf

TF_CreateLangBarMgr
TF_CreateCategoryMgr
TF_CreateThreadMgr
TF_RunInputCPL

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ADATA
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_MEM_READ