f14352c2e09f7f298cb32fa1c12fb1072ffe626a8a8031ba79aad8ea54ea6652 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f14352c2e09f7f298cb32fa1c12fb1072ffe626a8a8031ba79aad8ea54ea6652
Size

66KB
MD5

468d9507fd5bb7f746bf4f86d3338850
SHA1

ee3eda58e97d7e095f9d46be349905de46d7398f
SHA256

f14352c2e09f7f298cb32fa1c12fb1072ffe626a8a8031ba79aad8ea54ea6652
SHA512

60a3e22869aca722920642da6cfed485cf9625a1fd0da2c44dd503425c4d5b25cbc5adfd6e70cb2c3f721b1da412561446f64254c0039442abcf13a127696a7e
SSDEEP

768:RL0G0ryvUq+5oBe3kKBIRuP2OnPRg9ZTbkLJ+DYGtQGXKKeGfLLsBIztKlDeOKuY:J5L8XEbqgn5nsBIztkKuXNtuWB4JJ24

Score

N/A

Malware Config

Signatures

Files

f14352c2e09f7f298cb32fa1c12fb1072ffe626a8a8031ba79aad8ea54ea6652
.exe windows x86

2920364ae0a66588a1c57ba158c79b27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterWait
RemoveLocalAlternateComputerNameA
VDMOperationStarted
GetConsoleAliasExesA
GetVolumeInformationW
SetThreadContext
EnumSystemCodePagesA
GetSystemInfo
BaseCheckAppcompatCache
SetConsoleNumberOfCommandsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE