4f6d15882479cf4038930236a7dbdec473f7b7316ecfe5328756f32429f5e7e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f6d15882479cf4038930236a7dbdec473f7b7316ecfe5328756f32429f5e7e4
Size

474KB
MD5

40539f6538e86137e86bd7867e11f430
SHA1

a25ca54182ddcf061fa4c044dbec98c7975434d9
SHA256

4f6d15882479cf4038930236a7dbdec473f7b7316ecfe5328756f32429f5e7e4
SHA512

e4435b9f72d5601e8f1a8ba421b832c2e39fdc69acfb4911d89fb6e5086253421e67e943d6adca9a7391191d3eb1695c3d7cda4e0fa22213ac3afe4dbebc4c81
SSDEEP

6144:Kcj5EabkQxmr0/wguJpVopIM/eiG3cE9bAxsfW7qz1jC84PXJcKK8dz5CnezFOHI:Cab2r1jJ7oaz33O6euNC8+Zwp56

Score

N/A

Malware Config

Signatures

Files

4f6d15882479cf4038930236a7dbdec473f7b7316ecfe5328756f32429f5e7e4
.exe windows x86

bfc04b5c022f453c500f6047d65ec93c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreW
FindNextVolumeMountPointA
GetFileSizeEx
RequestDeviceWakeup
RegisterConsoleIME
FindFirstFileExA
Process32Next
GetComPlusPackageInstallStatus
Heap32First
GetGeoInfoW
IsBadCodePtr

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE