f2a78f8879bf211bfe8cd5a21246d9ac56fe9fa45853c3de3aa4cf4d39dfcb6f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2a78f8879bf211bfe8cd5a21246d9ac56fe9fa45853c3de3aa4cf4d39dfcb6f
Size

56KB
MD5

6fdd7d1ff39fbe08d1a654e3b3b8293a
SHA1

14c38656e478061ab49d2ab4ff39465edc0c2fe1
SHA256

f2a78f8879bf211bfe8cd5a21246d9ac56fe9fa45853c3de3aa4cf4d39dfcb6f
SHA512

8b9a5d38420679f4cb82505d42b7f1edb99a90ebb5292f51323e9de1e0297c097cdecb787104737a613768b3e2110c3a8e5ddf72ff6d6bbc2d9cb2fd149e2e38
SSDEEP

1536:IFc7gQ9ruBQFD/RCFj3g27QMX/phXnufn:IigQ9W+D/RCFbgRS/ph4

Score

N/A

Malware Config

Signatures

Files

f2a78f8879bf211bfe8cd5a21246d9ac56fe9fa45853c3de3aa4cf4d39dfcb6f
.exe windows x86

59deb807a4ffa6816bb238407279aee9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ChangeTimerQueueTimer
lstrcmpA
DuplicateHandle
GetPrivateProfileStructA
OpenProcess
Module32Next
GetCalendarInfoW
OpenMutexA
QueueUserAPC
ExpandEnvironmentStringsW
WriteConsoleA
HeapFree

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE