aad6a56418cec017e0a6d0a1e54258b47a85f381f93df8470dd77fa11f32644e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aad6a56418cec017e0a6d0a1e54258b47a85f381f93df8470dd77fa11f32644e
Size

501KB
MD5

31e70fe58468d341305e05ca615e7b20
SHA1

8d68633708ad4d0e5f730034d863cee28bd59ec3
SHA256

aad6a56418cec017e0a6d0a1e54258b47a85f381f93df8470dd77fa11f32644e
SHA512

f77578eb4ed1836605d62d0f57803298904591998e32b868bf4ce21a6dbb944d7b43a9e7b10cc2196a7d953f111ec6a72e01c457b7ddce6d476d0d3970034aeb
SSDEEP

6144:3DGvBf9/wguJpVopIM/eiG3cE9bAxsfW7qz1jC84PXJcKK8dz5CnezFOHP9DgPH6:3D1jJ7oaz33O6euNC8+Zwp5k6

Score

N/A

Malware Config

Signatures

Files

aad6a56418cec017e0a6d0a1e54258b47a85f381f93df8470dd77fa11f32644e
.exe windows x86

e649c44e88bbd2e5d25a5e7dc49150c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterWaitEx
EnumResourceNamesW
LZDone
DeleteVolumeMountPointA
FindNextFileA
SuspendThread
GlobalSize
SetConsoleInputExeNameW
GetVersionExW
GetCommState
GetCommModemStatus
Heap32Next

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE