d78cbd804cbb4b7d450f4924a4fa81df93de82ffe1b861aa8cf89e90196554be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d78cbd804cbb4b7d450f4924a4fa81df93de82ffe1b861aa8cf89e90196554be
Size

63KB
MD5

a01c3bb8186b7c32d33ed26a82057ddf
SHA1

7aa4fbbd579e5fb0e1303f75a5b171183bf7ef9e
SHA256

d78cbd804cbb4b7d450f4924a4fa81df93de82ffe1b861aa8cf89e90196554be
SHA512

0cfa1c6bf1bc8890ae7dd6e1d8f7efbbdaad538165eed4d1c6632b0ebab4aa022feb11915e0ae72f4ad057ac0b4b6806264f3b991538b2b71adc4c2fdde836e2
SSDEEP

1536:E/DZVEkToJWECIb/QyqBo3go3cXTcCJrNTlt/rYM:EdKCoJh9bIyqGw+S1wM

Score

N/A

Malware Config

Signatures

Files

d78cbd804cbb4b7d450f4924a4fa81df93de82ffe1b861aa8cf89e90196554be
.exe windows x86

b3324636968c33475cd5506f49e70f6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelTimerQueueTimer
TlsFree
HeapAlloc
GetLogicalDriveStringsA
AreFileApisANSI
Process32First
DeleteVolumeMountPointA
SetConsoleCursorMode
GetCommMask
GetSystemWindowsDirectoryA
WritePrivateProfileStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE