866306fd9dd387e605d767fc31bbfa82f81d8ce913963479e7eb07b80628fa91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

866306fd9dd387e605d767fc31bbfa82f81d8ce913963479e7eb07b80628fa91
Size

62KB
MD5

a35676b5b0ef8b08eae67d8be147f6c0
SHA1

7f884f7bc4d572636530ba44f25154388b060f45
SHA256

866306fd9dd387e605d767fc31bbfa82f81d8ce913963479e7eb07b80628fa91
SHA512

8d8efb875dcc45862f62b23687e6281bc2b0262a9145699e783161da3acfff5ac791a7150f28856f6ef6cf254c46126fe01b5d241401946737c04463a9391f84
SSDEEP

1536:CmzvvGSzIarduKEv/h8kg+BUcGYWGvfKLvJ//kF3z43Uc:yS/dubZYKUvYWnhHkz43Uc

Score

N/A

Malware Config

Signatures

Files

866306fd9dd387e605d767fc31bbfa82f81d8ce913963479e7eb07b80628fa91
.exe windows x86

3c5516cd0d7bc9f6f104d7c91f230f1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateTimerQueue
UnregisterWait
GetCurrentThreadId
GetCommandLineA
InterlockedCompareExchange
CreateProcessW
FindFirstFileExW
GetModuleHandleExA
DeleteFileW
CreateVirtualBuffer
GetTempPathA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE