542a8120a35ec58c0978e01c9cba5153b993a1b8c691557a567b8d39f86d1085 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

542a8120a35ec58c0978e01c9cba5153b993a1b8c691557a567b8d39f86d1085
Size

67KB
MD5

a1ba2993375f9cd1b114eb0a4da25bab
SHA1

bdea138fde77cf1dd9f03f475bab0b22850be713
SHA256

542a8120a35ec58c0978e01c9cba5153b993a1b8c691557a567b8d39f86d1085
SHA512

f3ddd91ce853cf0811edf5dc0da54dbe9899aa98ff741fa48c82958345991785fbc6e098118daa6416193840288e942cbc75b8a58d19da9700ba56ab34299920
SSDEEP

1536:ATbbFsJXt+zYI6evWmB05G4MkX9hqHvlLkrA2+m:AZMXE81b9Okb09GF

Score

N/A

Malware Config

Signatures

Files

542a8120a35ec58c0978e01c9cba5153b993a1b8c691557a567b8d39f86d1085
.exe windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 47KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE