f22a8c9a2b37933f92534d8c253b9744716054b63ad9f173d95c72b889ba8c13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f22a8c9a2b37933f92534d8c253b9744716054b63ad9f173d95c72b889ba8c13
Size

395KB
MD5

5400e0906e6b61f442106ea18f55f7d0
SHA1

553a32090e60f39af5e2469344d06a756829e7c6
SHA256

f22a8c9a2b37933f92534d8c253b9744716054b63ad9f173d95c72b889ba8c13
SHA512

141a8aea9324e83f2ff8c6ad272bf1c5b2cd6eb8f5450c3fa3c085722b36c39d6e7dfae51fc47ae2a2cca2eaa9986c6ba2629973891fbe05ea62521f9143ec86
SSDEEP

12288:ROE4/k/ht3JzqqziId+gX2S6aTny2uKmrEY:ROE4spt3tLGId+gm6Rur

Score

N/A

Malware Config

Signatures

Files

f22a8c9a2b37933f92534d8c253b9744716054b63ad9f173d95c72b889ba8c13
.exe windows x86

3c21f201ae2742ab4ec2f693c60db359

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
RemoveDirectoryW
RemoveDirectoryA
ReleaseMutex
ReadProcessMemory
ReadFile
GetLocaleInfoA
QueryPerformanceCounter

quartz

AMGetErrorTextA
DBToAmpFactor
AmpFactorToDB

Sections

.text
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 508KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 390KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE