01d14153de1eedea9bba80aba04b55f748de0ad1a505b0d46bd43874d1f8f8ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01d14153de1eedea9bba80aba04b55f748de0ad1a505b0d46bd43874d1f8f8ed
Size

56KB
MD5

0ad1670717dbeb47958098033c36ac96
SHA1

276439400a9c4e325fbe6b8b68f0c8e51b4d579d
SHA256

01d14153de1eedea9bba80aba04b55f748de0ad1a505b0d46bd43874d1f8f8ed
SHA512

a886fa0ec350c5b202a7e105527b7e07254239d07503c074680fef9339fb0252a030549f1a987162f452191725b7cde58565fe00b52bfe20a18593e3a83e69ba
SSDEEP

768:/esss8lG/CxeGA2yv8RDV/BLVQVlybTex99IKaD2N0GkPN+0AeZ4JmTe2P0s/ee/:/hxmoE+L3JM7HlXDGh3flLihb2/Q

Score

N/A

Malware Config

Signatures

Files

01d14153de1eedea9bba80aba04b55f748de0ad1a505b0d46bd43874d1f8f8ed
.exe windows x86

3cf2f09c794402ce3f4e8e09a5f97db3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileStringA
SetInformationJobObject
GetVolumeNameForVolumeMountPointA
IsBadStringPtrW
CompareStringW
VDMConsoleOperation
OpenSemaphoreW
BaseAttachCompleteThunk
FindCloseChangeNotification
_lclose

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE