0278ed3d5fb3df9e6bf360882e9018108f89e04c59cb94b323de024a08f8c59f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0278ed3d5fb3df9e6bf360882e9018108f89e04c59cb94b323de024a08f8c59f
Size

501KB
MD5

4f1e7ccf9cd3c8fce5dc9ac0afef9520
SHA1

2ed20c2aa9563e266ddb693878939253cdb45bbd
SHA256

0278ed3d5fb3df9e6bf360882e9018108f89e04c59cb94b323de024a08f8c59f
SHA512

752ec4c3e479e2ffffa2f6f19911ec24394e8c650bf25d3354ccb3a3456f805ab48932459837c47ffe7e101ad21779f581950b68340484be1223ad42bc86bac8
SSDEEP

6144:wtlpgonzS/wguJpVopIM/eiG3cE9bAxsfW7qz1jC84PXJcKK8dz5CnezFOHP9DgC:y/gCjJ7oaz33O6euNC8+Zwp5k6

Score

N/A

Malware Config

Signatures

Files

0278ed3d5fb3df9e6bf360882e9018108f89e04c59cb94b323de024a08f8c59f
.exe windows x86

0ec93c53b946d3ab1f1b1dd54c75c656

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugSetProcessKillOnExit
GetTempPathW
GetLogicalDriveStringsW
TlsFree
GetWindowsDirectoryW
RtlCaptureStackBackTrace
IsValidLanguageGroup
InitializeSListHead
GetMailslotInfo
lstrcpyn
LocalCompact

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE