f66056060e2e7adb7b7d5e342d9a1f6bd2baf7d31b27d9967d79f69fed0afbba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f66056060e2e7adb7b7d5e342d9a1f6bd2baf7d31b27d9967d79f69fed0afbba
Size

67KB
MD5

578fd20eed1ed870200f09981c4c20b3
SHA1

808cd61ecfaca75317d4a811f9720f4f8a36bffd
SHA256

f66056060e2e7adb7b7d5e342d9a1f6bd2baf7d31b27d9967d79f69fed0afbba
SHA512

6411a5f1cb3e4949e2de7c72f1f234024ff53a9cc57bf0c7507a3985ef38c59968b0e647c7954d9623fc36bd64bdc6234e9ef5947be3d300395010a186cc4d27
SSDEEP

1536:h9R2IGAhhAYcq1VzyWsnIEu6R7+zEkiS7zFz0w/:jsqhhAYcq15EuWc9/e

Score

N/A

Malware Config

Signatures

Files

f66056060e2e7adb7b7d5e342d9a1f6bd2baf7d31b27d9967d79f69fed0afbba
.exe windows x86

b5b6de656c4e924ff97793a32f2ff390

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtect
TlsFree
lstrlenA
GetNumberFormatW
GetModuleFileNameW
VirtualFree
lstrcpynA
FormatMessageA
GetModuleHandleA
GetLocaleInfoW
GetStringTypeA
CreateEventW
TlsGetValue
DeleteFileW
GetPrivateProfileIntA
GetFullPathNameW
SetCurrentDirectoryA
GetCurrentThread
UnmapViewOfFile

wmvcore

WMCreateBackupRestorerPrivate
WMCreateEditor
WMValidateData
WMCreateReader

Sections

.text
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE