e19dc5cb0492da891cda565f45dfe97f4c30705f312a379490d168b5ae4a69ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e19dc5cb0492da891cda565f45dfe97f4c30705f312a379490d168b5ae4a69ad
Size

320KB
MD5

a0ea7fd1eb3595e4daf0c2005c8d2160
SHA1

df3e7b8455fda5841326b08c66c25072dffd020b
SHA256

e19dc5cb0492da891cda565f45dfe97f4c30705f312a379490d168b5ae4a69ad
SHA512

41138e7479c3ffba07799d15b2c1851c73c6ebeb347385e4a75599f4ec94de68535e48197b6630e1e1463bad532b258302bdb2fc3596a395fabcce25bec64aaf
SSDEEP

6144:yQXh6UoK2RH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:yIqZ2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

e19dc5cb0492da891cda565f45dfe97f4c30705f312a379490d168b5ae4a69ad
.exe windows x86

369d2ee03bbc23acaa9c5303f282f772

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationA
VerifyVersionInfoA
GetFullPathNameW
GetCurrentThreadId
PrivCopyFileExW
DecodePointer
GetCommMask
CancelDeviceWakeupRequest
EnumLanguageGroupLocalesW
CallNamedPipeW
GetCommTimeouts

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE