fa84f193aaa56f49ca299c3d0d359785855516b0db753c6e8e663b63d9270bf1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa84f193aaa56f49ca299c3d0d359785855516b0db753c6e8e663b63d9270bf1
Size

91KB
MD5

0f86957be7ff80b8416f3a890019db2a
SHA1

ff5d738484d133f11c06a17f02f04dfbaf9421b6
SHA256

fa84f193aaa56f49ca299c3d0d359785855516b0db753c6e8e663b63d9270bf1
SHA512

771a53bb80854b649a51a512150f0555b68f7ddaf69069238075ecfbf628ac020e2c16f86cac5b147c1e1dedb74012e7e72ea7d74a250ac31be449700dfbb982
SSDEEP

1536:zPbG62veVimhH7ZIr9g2ENfxPCsN+d1U4AS3pOe0lhulDXsURL/kGnPy:zwvAbCpgv6p1Uo3palhYLvy

Score

N/A

Malware Config

Signatures

Files

fa84f193aaa56f49ca299c3d0d359785855516b0db753c6e8e663b63d9270bf1
.dll windows x86

03b28b7d8525aca368be9142d02d284e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
LoadResource
TlsAlloc
TlsFree
lstrcatA
lstrcpyA
lstrcpynA

Sections

.text
Size: 24KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ