0dc554f03110e9cb472e9a5f74e48dc691fbd285b723a1ffe57ab2e776f200c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dc554f03110e9cb472e9a5f74e48dc691fbd285b723a1ffe57ab2e776f200c7
Size

91KB
MD5

235d0b6681e4067bd3c0850025c70e06
SHA1

f2580abd183d2fdd52b36949d32205578156c6cc
SHA256

0dc554f03110e9cb472e9a5f74e48dc691fbd285b723a1ffe57ab2e776f200c7
SHA512

c5fa7b6f0a1fd9fcedb74640375bb18dab005bc5db2c607a979d231e9e1246b4317b4d3e7194dd8aa1f597524e7fe32edc6fa5cfaa0deb8a32e34c5154ea2d4b
SSDEEP

1536:MDVq7fEEJyGGxn5I57adlKSpSXoKLcGDU5rglmMMPqw:MdgyhvIxalKSuSGDU2mdb

Score

N/A

Malware Config

Signatures

Files

0dc554f03110e9cb472e9a5f74e48dc691fbd285b723a1ffe57ab2e776f200c7
.exe windows x86

1e6a2a3be1cc833a1e4ed211e248ae69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadContext
GetConsoleAliasesA
GetSystemDefaultLangID
_hread
FindClose
GetProcessAffinityMask
lstrcpynA
VDMOperationStarted
GetProcessWorkingSetSize
GetACP
GlobalAddAtomW
HeapUnlock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE