3e129ebb590dafb6597198ca907a245745ecacd381d15ad385bbef101bacd115 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e129ebb590dafb6597198ca907a245745ecacd381d15ad385bbef101bacd115
Size

63KB
MD5

0465e1f8139778da7e5fe7d4994e79ab
SHA1

19eb4ebe36a4de8b473bec142dc28ec75e96575e
SHA256

3e129ebb590dafb6597198ca907a245745ecacd381d15ad385bbef101bacd115
SHA512

cbdd2475a1542a46da2c8a93a09bc2cdc6babaf530f03a66cff40b11a2f9306871400a000b0ea382d6b3e12cadd6eb56ad006a9d23003596df36c277094c8a91
SSDEEP

1536:KN/OAVBceqmaz9zwt2wstq7zH+RRxVV/jOFA:KNIUv2wstq7zH2zVV7OFA

Score

N/A

Malware Config

Signatures

Files

3e129ebb590dafb6597198ca907a245745ecacd381d15ad385bbef101bacd115
.exe windows x86

d511b7fd09109d09aee689d5744419a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
lstrcat
GetProcessVersion
UpdateResourceW
GetNumaHighestNodeNumber
GetDriveTypeA
MoveFileW
WriteConsoleOutputA
GetComPlusPackageInstallStatus
GetFullPathNameW
OpenDataFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE