002167c402f21f08ff9617e73820bc4b3d1f743d29c64202d150e1cb3521df1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

002167c402f21f08ff9617e73820bc4b3d1f743d29c64202d150e1cb3521df1e
Size

56KB
MD5

8035e3b32a93a02ba6b5af2d5d9c2cb0
SHA1

4c7e71f221fc249675edd7a7b1563778a555cd17
SHA256

002167c402f21f08ff9617e73820bc4b3d1f743d29c64202d150e1cb3521df1e
SHA512

0abbda583579daef8f796b2d93f3eef4a4564dd75c81b1538bd12dd3269036784973ada6edc12e38d0bd2804d3f23db082722c337e32e642ed7f46b10470e429
SSDEEP

768:puU0KN3UKCXJugfoxYy2b+Ze42x4BytcEexCBG84r1UVU90jASF7BsPqgZG7RLpy:puJZZfAJ2SYe0FBslZG39Rjj2

Score

N/A

Malware Config

Signatures

Files

002167c402f21f08ff9617e73820bc4b3d1f743d29c64202d150e1cb3521df1e
.exe windows x86

fbc418bada8db06b298fac1791f27bc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
DeleteTimerQueue
RegisterConsoleVDM
BindIoCompletionCallback
GetEnvironmentStrings
UnlockFileEx
FindResourceA
SetComputerNameW
GetSystemWindowsDirectoryW
MoveFileWithProgressA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE