4d40c7da4d5444bc46c3aba6d35a6744643ec41eb0f9ddd413b67f249ea2b9ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d40c7da4d5444bc46c3aba6d35a6744643ec41eb0f9ddd413b67f249ea2b9ec
Size

320KB
MD5

a09961d972c1f36dc047ab7984b64170
SHA1

5eb3f5787a0f516ac151d4a5e20869a01b240ef5
SHA256

4d40c7da4d5444bc46c3aba6d35a6744643ec41eb0f9ddd413b67f249ea2b9ec
SHA512

3e697d57f644e9df19de3de02a13996555d0cc8327f2b09fe4ab6fdcd3e3ae8fa8aa237a2c12005a4cc2eab72f2a4901e77e506ac6084bac61ed85f6886140d7
SSDEEP

6144:bmFQaYcW1I7HYfBfIH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:CVFcIIf+2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

4d40c7da4d5444bc46c3aba6d35a6744643ec41eb0f9ddd413b67f249ea2b9ec
.exe windows x86

138c783fff3e0bb9b82a4d81ea9f4652

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosPathToSessionPathA
PrivMoveFileIdentityW
LZInit
GetModuleHandleW
GetProcessId
SetFileValidData
GetModuleFileNameA
GetCurrentActCtx
WriteProfileSectionW
GetProcessId
GetCPFileNameFromRegistry

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE