ad0b57e1e968b89764403e081ac81352c01dbbcf7bf2a078a7e2494b3b3f58df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad0b57e1e968b89764403e081ac81352c01dbbcf7bf2a078a7e2494b3b3f58df
Size

56KB
MD5

0e13d272f64276f5d7b4235dfcd5c126
SHA1

0ce516075e2ef3a4c788fd1119862545469d8d55
SHA256

ad0b57e1e968b89764403e081ac81352c01dbbcf7bf2a078a7e2494b3b3f58df
SHA512

2b8d174a43e724e0153c9f9dceb63697e44abb90991936c2995b534f70a2ec840237bcab1d550e1770d79f4c505bf67d293aa29d676e9b23d7b7fec2db15ace7
SSDEEP

1536:y9ybpiQRuZPG+zheEaRFF/WLdjIWoH+kcts9n:y9ybBAZPPzU/WJIlYts9n

Score

N/A

Malware Config

Signatures

Files

ad0b57e1e968b89764403e081ac81352c01dbbcf7bf2a078a7e2494b3b3f58df
.exe windows x86

66da5bbc55379fb2d9c0da757697caff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpungeConsoleCommandHistoryA
GetNumaHighestNodeNumber
SetProcessPriorityBoost
MapUserPhysicalPages
FindAtomW
GetModuleHandleW
GetProfileSectionW
SetVolumeMountPointW
EnumResourceLanguagesA
_lcreat

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE