daae54071619a186038ebcf5edb08a3107e86f66ec2e26bd186125ca8fed3a4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daae54071619a186038ebcf5edb08a3107e86f66ec2e26bd186125ca8fed3a4f
Size

320KB
MD5

08e39b79d692f9084c064afd13f9cc30
SHA1

4166c67c72e8487c0636ae59a7e67ae4c7d3ced7
SHA256

daae54071619a186038ebcf5edb08a3107e86f66ec2e26bd186125ca8fed3a4f
SHA512

67711d899a5c973ccf5d3a48c62ee13a63cbaeec5ac18babd1887e8b3b5127c7b75beee0a4905720a7654ef2e8f3ab7d07c72f7c5bba4a34d6cd06a882ef42b4
SSDEEP

6144:BO/rGxH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:U/rG52EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

daae54071619a186038ebcf5edb08a3107e86f66ec2e26bd186125ca8fed3a4f
.exe windows x86

ee85bd91e5ea42814ef2f2d7cc5d1150

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameExW
GetSystemDefaultLangID
QueryMemoryResourceNotification
GetOverlappedResult
TermsrvAppInstallMode
QueryPerformanceFrequency
GetVolumePathNamesForVolumeNameW
FindAtomW
WaitForSingleObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE