1da8b15245f4d6c00e1734be74ffec3907fab0eac87799ab25b7bf00a59fed95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1da8b15245f4d6c00e1734be74ffec3907fab0eac87799ab25b7bf00a59fed95
Size

56KB
MD5

17f30cff0a6c2be67e88375eea6bdfcb
SHA1

fccbdffb69e656c95a7911322c69dca44f3349ce
SHA256

1da8b15245f4d6c00e1734be74ffec3907fab0eac87799ab25b7bf00a59fed95
SHA512

2f1833c313b1258a9f2dff59ff9221a56de7d4a7f4fa03d53cb660db485b8572a8729e31b4c4ff5b0f6140d645dc968cc1675993831098f6e2559eef0f531da1
SSDEEP

1536:BU3+CfyVwCJvykkk/Ian6glXIANh6o5rRzoXxyiRcoC58ks3rSq:WJfyBJdk+jV9IArdB2Xxyi2oCe33rv

Score

N/A

Malware Config

Signatures

Files

1da8b15245f4d6c00e1734be74ffec3907fab0eac87799ab25b7bf00a59fed95
.exe windows x86

f5892ce2e0e8f94b1cd735c817d28853

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReplaceFile
EnumCalendarInfoExW
VDMOperationStarted
GetCPInfo
EnumResourceTypesW
GetFileAttributesExW
InterlockedDecrement
GetDllDirectoryW
lstrcmp
OpenProfileUserMapping
CopyFileExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE