da94f79d48b98eb309ef096f216a9176c017fe15481b6ff57664465b93fba957 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da94f79d48b98eb309ef096f216a9176c017fe15481b6ff57664465b93fba957
Size

63KB
MD5

0942ce0203271aa667fde76ed532c660
SHA1

c97f7a4fdcbbd762d7db5a53d72cbc329f94eac4
SHA256

da94f79d48b98eb309ef096f216a9176c017fe15481b6ff57664465b93fba957
SHA512

4dadc96fe2004524efc7ad599861772ad4f740c204707d84e08ed28ea5363f9b325761a5a7ff4a847406afa74a71aca51211b613c1619e9a69d16ea13221fbff
SSDEEP

1536:H2KH4D0OEfJp7gKg7d7W+ggV4GnuUDrPkV/r1b0Of:S0BfJZgXxbgLGnuoyr1Ff

Score

N/A

Malware Config

Signatures

Files

da94f79d48b98eb309ef096f216a9176c017fe15481b6ff57664465b93fba957
.exe windows x86

8db78b9ce32a2ef4c21189f081641e0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProfileUserMapping
SetCalendarInfoW
GetCurrentActCtx
GetSystemDirectoryW
WinExec
UpdateResourceW
RtlCaptureContext
FindCloseChangeNotification
DeleteCriticalSection
ReadConsoleInputExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE