d0296c2ee544ccba74e99b7c8e61ec1aedf69d38e86c1dc722897d50b5e622ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0296c2ee544ccba74e99b7c8e61ec1aedf69d38e86c1dc722897d50b5e622ef
Size

66KB
MD5

89015d10bfd1088938fc2e82acf8aa2f
SHA1

74e6edfec6fe6da681db6e5cd71f326b2a024541
SHA256

d0296c2ee544ccba74e99b7c8e61ec1aedf69d38e86c1dc722897d50b5e622ef
SHA512

2e093cd6b8a1fd15c413ba4e6995350af0ff22738fa33fa0e9ff3de60e4cec4e9fe8cb7b3e8e299868846c439521662c50f0844ff9d76964d05e589f7d4389f3
SSDEEP

1536:uva2mADSgGvHxcXASq68U+PKPuqmM8IG7Utavb38e3ouf7KuB0PmRi4Lhw:uvMcAqGItaj3VYuf7Km0Va

Score

N/A

Malware Config

Signatures

Files

d0296c2ee544ccba74e99b7c8e61ec1aedf69d38e86c1dc722897d50b5e622ef
.exe windows x86

7f43a86d947c51bd2ca30df16e6cda12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemPowerStatus
FindVolumeMountPointClose
ReadFile
GetProcessTimes
GetProfileSectionA
AllocConsole
GetEnvironmentStringsW
GetBinaryType
SetProcessPriorityBoost
IsValidCodePage
GetPrivateProfileSectionNamesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE