0ddae0c9c43f3394de068a90fccab95fa8117cbc5f00de9f07e104f8abf5424b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ddae0c9c43f3394de068a90fccab95fa8117cbc5f00de9f07e104f8abf5424b
Size

320KB
MD5

a0de401781409bac0fbcec03448f1180
SHA1

9065731be98afbbc07042b266a103acbabdb5647
SHA256

0ddae0c9c43f3394de068a90fccab95fa8117cbc5f00de9f07e104f8abf5424b
SHA512

943d1d4203568e004eae40e365e640654f8ebbe8efa6ec905cd6d569801c7bfae5348d04df9ab05db4172027c26a1726250474dd198990d43715b8e65ffe1590
SSDEEP

6144:Ql9iXmvNdl4H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:O9iXmvNvu2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

0ddae0c9c43f3394de068a90fccab95fa8117cbc5f00de9f07e104f8abf5424b
.exe windows x86

dca42e05d65aa122c5d679f4cf26170e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexA
AddAtomA
GetTempFileNameA
GetConsoleKeyboardLayoutNameA
DelayLoadFailureHook
TlsAlloc
DeleteFiber
CreateFileA
SetHandleContext
GetPrivateProfileStructA
VirtualQuery
ReadDirectoryChangesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE