dbf9da4fc38c48ec8c998ae9c28f0ffb03928853bf6eb6859598f8707f876d3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbf9da4fc38c48ec8c998ae9c28f0ffb03928853bf6eb6859598f8707f876d3c
Size

455KB
MD5

811ca5841fdb73d7f2bcbd8a3d66f83c
SHA1

8164ce74dbc91f2e0206a22d70a88172394c14a1
SHA256

dbf9da4fc38c48ec8c998ae9c28f0ffb03928853bf6eb6859598f8707f876d3c
SHA512

640cd1dc95b39a1b9769dd4fa219db88e0c11127ec3b4854f97d4eb23710446a468a6ef4d74649518501c5b825f9377b426bd3390e708971f4e12d025d23f4ed
SSDEEP

12288:ND6ax6Fw/k/gEj5rFZST40lw+wIFX5A26fGBT:ND6ax6Ft/gaXSTbwUXifGd

Score

N/A

Malware Config

Signatures

Files

dbf9da4fc38c48ec8c998ae9c28f0ffb03928853bf6eb6859598f8707f876d3c
.exe windows x86

dae2264e721d7c66f7fa35e864d11aba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 440KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 435KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ