fd27b1d7e255147bf27c441916bafc3816fb7cd06fe2b01248a1d6d10462db07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd27b1d7e255147bf27c441916bafc3816fb7cd06fe2b01248a1d6d10462db07
Size

144KB
MD5

090b2e7a10e7b8184bac7760ff423bd1
SHA1

3ba05473c1fe0c83221bf13d969f581d2afabb68
SHA256

fd27b1d7e255147bf27c441916bafc3816fb7cd06fe2b01248a1d6d10462db07
SHA512

b148b50b329512c5b68dcdb113138e3f0491d0a0f5002999d41bda4ad400a9843ac017a50fd689e2fec36fe49e510753ac0571ce7f298844a0fbbf241dd96178
SSDEEP

3072:Yj42APO9FhtUL74vkYUmg1D/fbLJjSRJo2qTmz2g1l5W9Lra:YjO8htUJYFWDng6mbP5W9n

Score

N/A

Malware Config

Signatures

Files

fd27b1d7e255147bf27c441916bafc3816fb7cd06fe2b01248a1d6d10462db07
.exe windows x86

c9a037e523df582174b4f65a13fddefd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

SetVolumeLabelA
GetEnvironmentVariableA
GetModuleHandleA
CreateFileA
GetProcessWorkingSetSize
GetExpandedNameA
VirtualAlloc
CreateMutexA
GetStdHandle
FindFirstChangeNotificationW
VirtualAlloc
HeapUnlock
MoveFileWithProgressW
VirtualAlloc

gdi32

RemoveFontResourceW

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 86KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ