2d0417d8b66e66994142879c280e4f0e997152e0ed59553ec0dd77887001ec95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d0417d8b66e66994142879c280e4f0e997152e0ed59553ec0dd77887001ec95
Size

62KB
MD5

f93cbb14d452e7f378b582e4fa9ab550
SHA1

8647f36194ac1cc70fe90f792f020ea8d5f9bb16
SHA256

2d0417d8b66e66994142879c280e4f0e997152e0ed59553ec0dd77887001ec95
SHA512

faee5d1a9132252f373dbd8eebe2884e4011e2c1d06fc5b69e636438c1902d80086814271b868563d864a2a9ef706b300baa6837a7cee33f6092974478116cce
SSDEEP

768:7mY6knN2KRjma1Gq6zevATed5ZfV64eNGXo2xMkroulxt2hInhxi8HzD1GuBAfW+:71UzTqXo2ORul6mnhdhBAfW0COSNIfI8

Score

N/A

Malware Config

Signatures

Files

2d0417d8b66e66994142879c280e4f0e997152e0ed59553ec0dd77887001ec95
.exe windows x86

ee82ea86500a86d3dc722ad986382da0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmp
FindVolumeMountPointClose
GetNextVDMCommand
SetThreadIdealProcessor
BackupRead
SetLocaleInfoA
InterlockedPopEntrySList
MoveFileA
IsSystemResumeAutomatic
EnumCalendarInfoExW
EnumSystemLanguageGroupsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE