18900d92c9a458d71c1830cbf1886c12680994b90a1f27f51d013bd08f73e253 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18900d92c9a458d71c1830cbf1886c12680994b90a1f27f51d013bd08f73e253
Size

66KB
MD5

f9e484ee51cea0e8ccb86d6f3bfcc92e
SHA1

410ea991abe4b0238c6a2e18f63807b811b3afd0
SHA256

18900d92c9a458d71c1830cbf1886c12680994b90a1f27f51d013bd08f73e253
SHA512

67bec4523f94ca252809cf0e5cc9df7a28c2f37a660ae8afefbc159911d9dc1639a501c244e8760657e50ab3bee6655bfcefd0fc0c8857e7ad643a49f84dd1f7
SSDEEP

1536:gC5S5SxbgXDVmN+sKv8nzXP0j85NeXRtkTgCRc9LMJfAOrCKhBb:Lx4V7sKvcPAMNeBtk0CROLaIOjrb

Score

N/A

Malware Config

Signatures

Files

18900d92c9a458d71c1830cbf1886c12680994b90a1f27f51d013bd08f73e253
.exe windows x86

e4b47695a6e118f53e7f3ab2bdf12f79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
SetCriticalSectionSpinCount
WritePrivateProfileSectionW
QueueUserAPC
LocalFileTimeToFileTime
ExitVDM
FindResourceW
GlobalUnlock
ReadFileEx
ReplaceFile
FoldStringW
_hread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE