2f40985930a953f805224e048d6e51fc98311dcac95d23ab760c574047cfdeef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f40985930a953f805224e048d6e51fc98311dcac95d23ab760c574047cfdeef
Size

812KB
MD5

02643c6b2b89128a04a15a241d41faa6
SHA1

697e2d03f0a0c7d44dfabe381901fb2c65f8092b
SHA256

2f40985930a953f805224e048d6e51fc98311dcac95d23ab760c574047cfdeef
SHA512

e0baecbcb45c0cef36abfeeea78c71765cc4ae8118350784ec07dbba4b65184b70c92d3152114b53302ff8d1442e268ac7d45de9506137391a21a4c8e98f2e01
SSDEEP

24576:QqwGnk/aLWHLu1LEp4AzSyERKtWTAz9ymduEM9S3t/:7wcQa11AS/otP1GEd

Score

N/A

Malware Config

Signatures

Files

2f40985930a953f805224e048d6e51fc98311dcac95d23ab760c574047cfdeef
.exe windows x86

ce9e537ea28cff7a3e8bd8e03f01120a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
GetProcessVersion
GetCurrentProcess
lstrcpyW
LeaveCriticalSection
GetConsoleTitleA
DeleteFileA
SetCurrentDirectoryA
SetStdHandle
LoadLibraryA
GetPrivateProfileIntW
OpenThread
SetVolumeLabelA
CreateMutexW
GetTickCount
GetStringTypeA
EnterCriticalSection
FoldStringA
HeapCreate

activeds

ConvertSecurityDescriptorToSecDes
ADsGetObject
ADsSetLastError
ADsGetLastError

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 800KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ