04298678357096be948c183ad58a42e814834e16179e817d1c480459e164bd99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04298678357096be948c183ad58a42e814834e16179e817d1c480459e164bd99
Size

62KB
MD5

6d3119963385435287156373f93bf777
SHA1

91a6500ada06f8d81df46923698a1221a33f1671
SHA256

04298678357096be948c183ad58a42e814834e16179e817d1c480459e164bd99
SHA512

f7f69cbe251b5930e4ec477a9e2fead4a2713a7ea0108b0b8f839dfae98ea9f6a39900175bb02802be100eb9ecddca380b77eaeca7167e72fec0c07d02a2ecb5
SSDEEP

768:+10kN0cSCJPXD/4P8WD3TEPDcKBlbWGDT6D5nndrnMNavcc2dsWmBRxjv1ipdIIV:0Prd2DbMNMcoWWjxipdTV8G4mNJf

Score

N/A

Malware Config

Signatures

Files

04298678357096be948c183ad58a42e814834e16179e817d1c480459e164bd99
.exe windows x86

0c40cece166b39ca0a92262439066c34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSectionAndSpinCount
GlobalFindAtomW
MapUserPhysicalPagesScatter
CompareStringW
lstrcmpW
LocalSize
GetBinaryTypeA
SetLocalTime
DeleteVolumeMountPointA
IsSystemResumeAutomatic

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE