81baf7fb7fafde949c41e428b8284488d8dad06e7a43e19e01e4c560492f4d8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81baf7fb7fafde949c41e428b8284488d8dad06e7a43e19e01e4c560492f4d8f
Size

76KB
MD5

f610bcf8376d5b5b5cd64819dd810d78
SHA1

7a84f46c77c484bced217f476643bb3fdace65be
SHA256

81baf7fb7fafde949c41e428b8284488d8dad06e7a43e19e01e4c560492f4d8f
SHA512

f7effb19bc85239376815c9e9d58a4250d1e0a1f979b26101ad465a0dbb0db3cc341fdbd3d4109f119e912ed9368a7f6731106f544bc5affbef54f1da66c327e
SSDEEP

1536:jzfRlof92IGiemow5ROV4BwMgfcILfMDRSOWpjVrs2ryrd1vUQuq6:jo12Uemo+RomwFEtaHs2qo

Score

N/A

Malware Config

Signatures

Files

81baf7fb7fafde949c41e428b8284488d8dad06e7a43e19e01e4c560492f4d8f
.exe windows x86

b5a718a7599c4409e2c9470ca2143787

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
GetVolumePathNameW
LocalReAlloc
GetVolumeNameForVolumeMountPointW
CancelTimerQueueTimer
DeleteTimerQueue
SetFirmwareEnvironmentVariableA
Process32FirstW
LeaveCriticalSection
LZCreateFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE