048bdfcd84d7b8d7f485c6ba01b2dcaabe99ecc5b346e60c72790257ac9d5c8c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

048bdfcd84d7b8d7f485c6ba01b2dcaabe99ecc5b346e60c72790257ac9d5c8c
Size

94KB
MD5

0c1fb545617e95659e65d4fd227f3e51
SHA1

5a129a410fe82bdfc4c818b0f2e52fc5a4ea9667
SHA256

048bdfcd84d7b8d7f485c6ba01b2dcaabe99ecc5b346e60c72790257ac9d5c8c
SHA512

f54eb710cc203dbdd891e0696a2af3ff06374be6dae9735c6e448363c2952bffea7ac95ac9c6d70db7219520322ae84b9824dcac9b13d686da23855e69bfeb06
SSDEEP

1536:b5Gc6e538WdVTCt6fCWWD8Jv7wMRvc8YaEJwZK4/83ZoMOALF6SSf:bIc6e538iT4a28Jv0MRvhZEXtpxLF6H

Score

N/A

Malware Config

Signatures

Files

048bdfcd84d7b8d7f485c6ba01b2dcaabe99ecc5b346e60c72790257ac9d5c8c
.exe windows x86

91d75871ed25bc69cd616d37bda051f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWowBaseHandlers
FreeConsole
FreeLibraryAndExitThread
FindFirstFileA
GetPrivateProfileStructW
OpenSemaphoreW
QueryDosDeviceW
GetDevicePowerState
RtlMoveMemory
DosPathToSessionPathW
EnumCalendarInfoExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE