f1e49a423d582ae8feeb03f1d38696f0ddc0d7fdb3c16701bbfd42a9c890b540 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1e49a423d582ae8feeb03f1d38696f0ddc0d7fdb3c16701bbfd42a9c890b540
Size

107KB
MD5

76ca58a7f5093c280866a24b002a7c80
SHA1

787ebd41b03a66bded8798c4422d168262adc9f6
SHA256

f1e49a423d582ae8feeb03f1d38696f0ddc0d7fdb3c16701bbfd42a9c890b540
SHA512

1681a3e82ee129d1949f11bf515fe1097ddf6f8d53e257525db3a5025afa1e3c5dfbbc4372d3534b138d1f0d567edb62e63001b768cd7dfff06618c191b3104b
SSDEEP

3072:DOrdEevHamWYFf3gDDq5LUinQHs2quGf9:DO2epxf3gDDqvnA

Score

N/A

Malware Config

Signatures

Files

f1e49a423d582ae8feeb03f1d38696f0ddc0d7fdb3c16701bbfd42a9c890b540
.exe windows x86

2d140669a3ca9eb8327ff3bd2a80e093

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFiber
HeapCreateTagsW
ConvertThreadToFiber
FindNextFileA
LocalFree
VirtualFreeEx
BeginUpdateResourceW
FindNextVolumeMountPointW
InterlockedFlushSList
GetFirmwareEnvironmentVariableA
GetCurrencyFormatA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 51KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE