0ff4b7207afb5ac96c2803b1acc18be2cc62f1cc54eb3c2d7acde85d9ee0a896 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ff4b7207afb5ac96c2803b1acc18be2cc62f1cc54eb3c2d7acde85d9ee0a896
Size

66KB
MD5

0444a049078d13e39de288e39d1d3402
SHA1

06df7f51b43d64fb7e27f826abe7cf7480fe4e73
SHA256

0ff4b7207afb5ac96c2803b1acc18be2cc62f1cc54eb3c2d7acde85d9ee0a896
SHA512

bd60da372e9457a7c61eddc7a95706712e5eb312c14c28bc60440e140ed03844d4a16a478e2219beac3eb8ffba493c0201d4b79c443613fc0f3fd88d7b385aa0
SSDEEP

1536:RxwQR4v3kwPzu+VNiZx4GZDVq+J16xqNaFeAd2t8c6hOr30jM:RXR4MwiSNgDoxxqN0eKU8c6Erf

Score

N/A

Malware Config

Signatures

Files

0ff4b7207afb5ac96c2803b1acc18be2cc62f1cc54eb3c2d7acde85d9ee0a896
.exe windows x86

1f8a1b466a77555587833d46c52f136b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProfileStringW
HeapLock
DisableThreadLibraryCalls
UpdateResourceA
VerSetConditionMask
SetErrorMode
_lwrite
GetCommConfig
HeapUsage
GetVolumeNameForVolumeMountPointW
lstrcatW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE