75f0849f825aa97f83e1ecc1770e34ed0af4490288f93c779a6d5e45be18b6a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75f0849f825aa97f83e1ecc1770e34ed0af4490288f93c779a6d5e45be18b6a1
Size

76KB
MD5

0c1929c512bdda6f85c44af76b766a69
SHA1

09c20f75fbf328a48eed9d26b4eaed66d8990fd8
SHA256

75f0849f825aa97f83e1ecc1770e34ed0af4490288f93c779a6d5e45be18b6a1
SHA512

a0a56c41e3d08f82c9617741cba8adbcbeb16c128f6433d12e81ff597b3cfb2548935b8b98c5f329d70e06408964f579f2da7bc267bfacfe2babb96725288ebd
SSDEEP

1536:jBamZxLHeF7R1peeCmicB6IxhdFsJk1NjZ53MfqNa2up+IjEErxTWDTMqhGKYIZ5:jBamChRmmiU50arMSNK+IjBkMqhGKZTF

Score

N/A

Malware Config

Signatures

Files

75f0849f825aa97f83e1ecc1770e34ed0af4490288f93c779a6d5e45be18b6a1
.exe windows x86

c7324fc3a66845a703c8ac2f9e63bfd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFirmwareEnvironmentVariableW
GetVolumeNameForVolumeMountPointW
SearchPathW
OpenSemaphoreA
FindResourceW
FillConsoleOutputCharacterA
_lwrite
IsBadHugeWritePtr
ValidateLocale
DeactivateActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE