ba479f7f13e2694dc43b2a7384dd096f51e1618dc7160db8df0246fb6ea46138 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba479f7f13e2694dc43b2a7384dd096f51e1618dc7160db8df0246fb6ea46138
Size

24KB
MD5

14b849b1002f7c70a7fc7f2a639bdb20
SHA1

53727cc816d3f4fe05e10215c371ae7ea08c1f25
SHA256

ba479f7f13e2694dc43b2a7384dd096f51e1618dc7160db8df0246fb6ea46138
SHA512

0b368cbd7af8ea2a15478da50dc8bd574634ecab248eb04de2e7eddbfb67762afd0b9c4223fffaa0bae8cc8ec592528ae33f7cbf59eb6b0dcc270055a834ee9c
SSDEEP

384:wh7TQ9C2UDB6dYb4eHjGG/3xC6hVNVlAOI4O/2ZEaV80c4etZGi0DPVWk0kbaTq+:wl4C2UDB6mb4eDG+3xFNVlAOli26aVA1

Score

N/A

Malware Config

Signatures

Files

ba479f7f13e2694dc43b2a7384dd096f51e1618dc7160db8df0246fb6ea46138
.dll windows x86

defee39feb6cf70c36be8cd38cf2a663

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
LoadLibraryA
GetProcAddress

Exports

Exports

SHGetFolderPathA
UninitializeCom

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 255B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ