0f1966c47068eccb308ae6bf8e7d7bc1a12436e0fec115eb677cc09ea9abfbfd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f1966c47068eccb308ae6bf8e7d7bc1a12436e0fec115eb677cc09ea9abfbfd
Size

63KB
MD5

2cfcb83c8ce46485dee47c654d6660e9
SHA1

2d641045de0781e3eb868924c5f36e9323941933
SHA256

0f1966c47068eccb308ae6bf8e7d7bc1a12436e0fec115eb677cc09ea9abfbfd
SHA512

593db9ec695cee17a4ca3282dc96d5e9a1b720d04a61b1fa164ac731a47c530675e2cfd43f1cbf1215854bde43cb86975785c117e947973b25d1aed18eb40ac0
SSDEEP

1536:DobC/IU89S06OL00oy67lD2OC5Ol1FOXz3uHwVcdiiUK:DobsIN9S06O9a52DM1Mf/ih

Score

N/A

Malware Config

Signatures

Files

0f1966c47068eccb308ae6bf8e7d7bc1a12436e0fec115eb677cc09ea9abfbfd
.exe windows x86

cb8fa0095bd8ef2265e750e676a178c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelIo
QueryDosDeviceW
RtlCaptureContext
IsValidUILanguage
DeleteVolumeMountPointA
CreateFileMappingA
SuspendThread
EnumCalendarInfoA
TerminateThread
SetComputerNameExW
OpenWaitableTimerA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE