0b50b3940cbc0fb7c66d21862384872255a7cfc37d48de21a9f43498c4261107 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b50b3940cbc0fb7c66d21862384872255a7cfc37d48de21a9f43498c4261107
Size

56KB
MD5

4d982e7fd7b70d23b2fd05717553e826
SHA1

4b053511f16766e22125e383f5820ce5e5cd9dcc
SHA256

0b50b3940cbc0fb7c66d21862384872255a7cfc37d48de21a9f43498c4261107
SHA512

b7a700e680b945df899791e25aa03c8f829c89b526361ce8b8090e58ea670c6625ef8962f9dc123abd4cee62d8b3e5c25db4a511888b0b721da481e593d1268c
SSDEEP

768:BohlI46GyKclC2fetzIU8ywXYGGdNDF7CvHXS19EWcnZLw:BohlI46BKclgx8yjNdNkvfWyM

Score

N/A

Malware Config

Signatures

Files

0b50b3940cbc0fb7c66d21862384872255a7cfc37d48de21a9f43498c4261107
.exe windows x86

f26a7b9a4b091e0c80c9276caedf2d01

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
Sleep
GetSystemTimeAsFileTime
GetCurrentThreadId
TerminateProcess
LeaveCriticalSection
GetModuleHandleW

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ