22647a4ecc0717fe73e7008a2c8a302bb937f0e795682bf133e29fbbc9967188 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22647a4ecc0717fe73e7008a2c8a302bb937f0e795682bf133e29fbbc9967188
Size

107KB
MD5

04ed4c9462e392b935b288f401162ce5
SHA1

4de4e9d03fd9436ef710791bf4a25bafda175e93
SHA256

22647a4ecc0717fe73e7008a2c8a302bb937f0e795682bf133e29fbbc9967188
SHA512

06b34cf86ce33f71ba20078ae07f774093e50d307b65de1f1a69677550b0771e0ec0ffb552597e95dbf2f12942720d7ffd161e696f844907bd64e4f4cbd61950
SSDEEP

3072:TV7A/sejD74UolnG4x+xlfyewHs2quGf9:hejD7folG4x8lTg

Score

N/A

Malware Config

Signatures

Files

22647a4ecc0717fe73e7008a2c8a302bb937f0e795682bf133e29fbbc9967188
.exe windows x86

dcb6a5eac981ac37631f6545b0e7819b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNameA
EnumTimeFormatsA
NlsGetCacheUpdateCount
GetSystemDefaultLangID
ReadConsoleInputW
SetConsoleTextAttribute
InterlockedFlushSList
NlsConvertIntegerToString
IsSystemResumeAutomatic

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 51KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE