ab7c02b2c9c2373394a6458e7fd2111c02df3cd197206f5856d8768fdb484764 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab7c02b2c9c2373394a6458e7fd2111c02df3cd197206f5856d8768fdb484764
Size

56KB
MD5

a1a9fa1296b0eca9974b83bcc146aed0
SHA1

d485df367969cf9837303528f49443ffd78b243f
SHA256

ab7c02b2c9c2373394a6458e7fd2111c02df3cd197206f5856d8768fdb484764
SHA512

1c63c12e5d018d5b03caf1d325e1520b5716f5041f9df12dab7f90364beeeb47d5cdc132c79d83b9d97e2ed023d1a9c46ac464cba0cfe1b369417c078b370650
SSDEEP

1536:RlRVs9z9OaMEda2bUF6Z+GKmv2QxEeT+uhJIH:PaTD1b/yQxEeT+uhJIH

Score

N/A

Malware Config

Signatures

Files

ab7c02b2c9c2373394a6458e7fd2111c02df3cd197206f5856d8768fdb484764
.exe windows x86

87e318e0d2651b483dab3167c80cc31f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaAvailableMemoryNode
GetFileSizeEx
EnumCalendarInfoExA
QueueUserAPC
TermsrvAppInstallMode
lstrcmp
CreateProcessInternalWSecure
TerminateThread
VirtualProtect
DeleteAtom
CreateWaitableTimerA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE