b44c5469ff70a968359da25bb81e1c84102a5f0b8061f56e52b76c907881a26a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b44c5469ff70a968359da25bb81e1c84102a5f0b8061f56e52b76c907881a26a
Size

94KB
MD5

0a742f70b7f45aff43863e9e5684b1e1
SHA1

b902bf542f04c79219e6141e1deb5666f63a9db0
SHA256

b44c5469ff70a968359da25bb81e1c84102a5f0b8061f56e52b76c907881a26a
SHA512

f3865048bd42ae31adda319a47634e54f49f586f74587f0467bee9bff5b1ed2ad6208948117a3156b34e91c1cefeac69cf5d121af3eb9796e3fed43e2a898078
SSDEEP

1536:3bAJY+kMWh3b0D+BvlEHidrnHsRAWMc2aiCRn0mCSIsTc8YaEJwZK4/83ZoMOAL0:kJY+kMCbS+Bvl2CrHEAW72aFfIWhZEXI

Score

N/A

Malware Config

Signatures

Files

b44c5469ff70a968359da25bb81e1c84102a5f0b8061f56e52b76c907881a26a
.exe windows x86

7e70be860f68d943f49badfdff3cd7e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RequestWakeupLatency
GlobalUnWire
MoveFileW
CreateProcessInternalW
LoadLibraryA
ExtendVirtualBuffer
FindResourceA
InitAtomTable
SetTermsrvAppInstallMode
FormatMessageW
TlsAlloc
_lread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE