fd9ba99279e8d6b03cfe81e5c5ef1bf2aa27c525cbd29ca43adfb2f5afa55d17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd9ba99279e8d6b03cfe81e5c5ef1bf2aa27c525cbd29ca43adfb2f5afa55d17
Size

501KB
MD5

30249edff7fee91fa5eb00f832d30990
SHA1

777c4321bde840f718c56b3acd29ac945edcf5dc
SHA256

fd9ba99279e8d6b03cfe81e5c5ef1bf2aa27c525cbd29ca43adfb2f5afa55d17
SHA512

5923bd9b95f2f087b4cfddd1f33a22d5ee38d44fb2f2eff75f3db744badee203e14c6bc79a930c30e2dcbdb66445c43449c5c02653494092c38c6d3b7ee66461
SSDEEP

6144:OgBOuPxwoZDeT/wguJpVopIM/eiG3cE9bAxsfW7qz1jC84PXJcKK8dz5CnezFOHD:OgBOuZwgjJ7oaz33O6euNC8+Zwp5k6

Score

N/A

Malware Config

Signatures

Files

fd9ba99279e8d6b03cfe81e5c5ef1bf2aa27c525cbd29ca43adfb2f5afa55d17
.exe windows x86

3f0c5285d2174f5c8fe0a94ade59f151

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFiber
VirtualFree
CreateTimerQueueTimer
OpenSemaphoreA
Process32NextW
SetVDMCurrentDirectories
CompareStringW
EnumResourceLanguagesW
GetProcAddress
GetSystemWindowsDirectoryA
FindNextVolumeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE