957c8c8107d3adedd03e1dc2feae9aec14eb1fad244da7fec42918ada4ac55a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

957c8c8107d3adedd03e1dc2feae9aec14eb1fad244da7fec42918ada4ac55a4
Size

96KB
MD5

0fb3465866b37b1356292a2da681da90
SHA1

84c97a89fc42833f992258eaa12ebb2b7c178fea
SHA256

957c8c8107d3adedd03e1dc2feae9aec14eb1fad244da7fec42918ada4ac55a4
SHA512

fd51809d8f7c003daaeb7df595f37ef5c712e6381cab16724ded0593d930f545c30a465354af2b98b41cea2f269a987cb2d15c0a6504d1cad6737a55d8b50055
SSDEEP

1536:VvnJv4RLGG9FU6NBuQ+FX4DZ52shRwhopjVrs2ryrd1vUQuqSuWnRrF4O5+n6J4t:ViF/FUgI4D265Hs2qmRlixH

Score

N/A

Malware Config

Signatures

Files

957c8c8107d3adedd03e1dc2feae9aec14eb1fad244da7fec42918ada4ac55a4
.exe windows x86

5d9709e7c06d74ebe00ead1915244a19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWaitForSingleObject
WritePrivateProfileStringW
RemoveDirectoryW
SetProcessShutdownParameters
CopyLZFile
UnregisterConsoleIME
GetNumaNodeProcessorMask
GetVolumePathNamesForVolumeNameW
RemoveDirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE