f615ae8ba83f56dc0f02e52ec195d5f44e24243719081b09b3c3010829cd0eb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f615ae8ba83f56dc0f02e52ec195d5f44e24243719081b09b3c3010829cd0eb0
Size

56KB
MD5

6ffb41454e8e113ebcbf07b2ab1a2280
SHA1

e98367e610afcbe5ccb7fa5d17a5b1c427702667
SHA256

f615ae8ba83f56dc0f02e52ec195d5f44e24243719081b09b3c3010829cd0eb0
SHA512

3568015d6de3222964de77e701ea678b18606bf4a9943626ec1ead333537c73becc09e4228cf19587a9eb12258da453fcc3e7a4f15005c9bba9c93bfde39aad4
SSDEEP

1536:7OONO1n8MPjwMs3aPAG6oY8RXwtWzc6KEMGuDWW3G2vfDHkIeMZKM:hxnG6oYQXXKD9Dm2kDW

Score

N/A

Malware Config

Signatures

Files

f615ae8ba83f56dc0f02e52ec195d5f44e24243719081b09b3c3010829cd0eb0
.exe windows x86

e62f54471a6cceaa1f35150ecb333cab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastConsoleEventActive
CreateTimerQueueTimer
SetCommState
CloseProfileUserMapping
LocalLock
MoveFileExW
MoveFileExA
CreateIoCompletionPort
GetVersionExW
ReplaceFileA
SetVolumeLabelW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE