acd8ee7d66fb667bffd8a4792516ede4402378d5c64dd5f2af7ecca3adea94af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acd8ee7d66fb667bffd8a4792516ede4402378d5c64dd5f2af7ecca3adea94af
Size

320KB
MD5

4dcca7cb3b510e7b89e4582be9dd5450
SHA1

d5d0c29a7b47e37203a7d97c3f74deae17f6840e
SHA256

acd8ee7d66fb667bffd8a4792516ede4402378d5c64dd5f2af7ecca3adea94af
SHA512

45cf6bc51a5be29358f40316bea62d76db176bddeed26d0f47666cdf27b7453f83560e3f6c0053288cf186ed2948d606c31a2ebf1d54a14d741164501250d0cb
SSDEEP

6144:bJERcLZEZMIH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:bCD2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

acd8ee7d66fb667bffd8a4792516ede4402378d5c64dd5f2af7ecca3adea94af
.exe windows x86

8efebb9504027f6459837fdc7fae5d7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32First
GetVolumePathNameA
GlobalReAlloc
GlobalLock
QueryActCtxW
_lread
FindVolumeClose
lstrlenW
SetLocaleInfoA
IsDBCSLeadByte
Heap32First
ConvertThreadToFiber
ZombifyActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE