a84a0221907edeae96ab033b18bb23f4b17979916533e3da43250328490d87d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a84a0221907edeae96ab033b18bb23f4b17979916533e3da43250328490d87d8
Size

66KB
MD5

9687285472b423fd4dec6bf5d75d0af0
SHA1

2f3ea7a36167cc173e77ee5f049c7ed5614fe42f
SHA256

a84a0221907edeae96ab033b18bb23f4b17979916533e3da43250328490d87d8
SHA512

5dfd840b4884ad1a367a59bb0e5e5512514f569517af724a72799009971c966c9e135e17dabf11cd7c6282896b7c2760d3007a8b0108cdb8ce83cd08d8020b7a
SSDEEP

1536:DMLSWGB/hY2wa/bmNiBCx2dQrZUuIJwgfrTaVvxVfYVSwjNE6JFuK8U1rlC:DESWE/y2DCiBCx2doZUuIJwgjAxNmhJ+

Score

N/A

Malware Config

Signatures

Files

a84a0221907edeae96ab033b18bb23f4b17979916533e3da43250328490d87d8
.exe windows x86

3dc2fdfce6f4730884ee252fd34679b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
FreeVirtualBuffer
lstrcatA
CreateJobObjectA
CompareStringW
FindFirstVolumeA
Beep
MapUserPhysicalPagesScatter
OpenFileMappingA
FindCloseChangeNotification
ExitProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE