85f029856e5df838e413e8eb9feca153b75265cb158794edd7de781d8f256979 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85f029856e5df838e413e8eb9feca153b75265cb158794edd7de781d8f256979
Size

347KB
MD5

4b6da814264254577312e0b3b3c4b1b0
SHA1

257cf6cca6c7d10339d37b8556dd030a8e42615d
SHA256

85f029856e5df838e413e8eb9feca153b75265cb158794edd7de781d8f256979
SHA512

41a4983f3ebeeec206a511277e87206c1a95f49eaeed603e60f60adcb961da169040c7526a655e5fcd17d5c2f36f42409f2a09f51b020cfbf571c9adfea003db
SSDEEP

6144:F91rb2GkHiZRz/Z4/I5qc1GBg7V4ufy9fAfGRAP5KClSDFxeydlO:F9Bb2GkHijN4Qr1h7CfGv4FY

Score

N/A

Malware Config

Signatures

Files

85f029856e5df838e413e8eb9feca153b75265cb158794edd7de781d8f256979
.exe windows x86

ad7f41068032e157f8435fab2f1d550f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleW
DeleteCriticalSection
GetCurrentProcess
Sleep
EnterCriticalSection
GetCurrentThreadId
CreateFileW

Sections

.text
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ