4c52b8e60e963fdb44ad99f3290ffca365485059ce5ef66db54b9209e93c4c61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c52b8e60e963fdb44ad99f3290ffca365485059ce5ef66db54b9209e93c4c61
Size

63KB
MD5

0b527029abd268ceb7b1b582cc433d15
SHA1

1da8b1b685fb8704e6789e8c3192b84b75717a18
SHA256

4c52b8e60e963fdb44ad99f3290ffca365485059ce5ef66db54b9209e93c4c61
SHA512

835406a82c6f0127f8d4779923c758fbfe1c34c5430df09fc77eaddf7bf40b48dc08cea26f3fb54cd2cd547efa0f9f2f5cbe03322a038c527c86e79a795ea663
SSDEEP

1536:1G08JqEr6aB/HHOZWDj8ETqVX419C4p7YMw5ZtFJknovt2FvZY0:QV1r6aNHF38ETqVYc4JqvR12V

Score

N/A

Malware Config

Signatures

Files

4c52b8e60e963fdb44ad99f3290ffca365485059ce5ef66db54b9209e93c4c61
.exe windows x86

b8cd296c2eb06b4d72c5f76cebea9e2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerW
SetMessageWaitingIndicator
FindFirstVolumeMountPointW
DnsHostnameToComputerNameA
GetStringTypeExA
DeleteVolumeMountPointA
InitializeCriticalSection
CreateMutexA
OpenProcess
_hread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE