2d5e72dafa0d88a809db2d8707163ff791ac5031a0581c994c42f268c4a3f157 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d5e72dafa0d88a809db2d8707163ff791ac5031a0581c994c42f268c4a3f157
Size

119KB
MD5

494c0a3329fb31046383998207b5779a
SHA1

c3ba0d4884afcff34153610908690ca0fb74800f
SHA256

2d5e72dafa0d88a809db2d8707163ff791ac5031a0581c994c42f268c4a3f157
SHA512

0f6312214f5cf9de40d62ebe67068b5168816ce1ee5b3e8c0d664999051f61bdfdcd70c295338cddd95db03b84ab7737a962c6c6055602966ac7aefea44d95ac
SSDEEP

1536:QPX5yHVOlrsL2fQmi68R2em/ygBzepjVrs2ryrd1vUQuqSSqK5tnCvv:Q/g6rsKfQm6h25eHs2qxnC

Score

N/A

Malware Config

Signatures

Files

2d5e72dafa0d88a809db2d8707163ff791ac5031a0581c994c42f268c4a3f157
.exe windows x86

740137d4d223b482dc62154e07806e33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadUILanguage
GetComputerNameA
DosPathToSessionPathA
ProcessIdToSessionId
FormatMessageW
BasepCheckWinSaferRestrictions
_llseek
_llseek
GetDllDirectoryW
EnumSystemCodePagesW
EncodePointer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE