164791d82dbae9a2f396e506c2a637e565937f92bfa08d5e72bacf4370e8d8f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

164791d82dbae9a2f396e506c2a637e565937f92bfa08d5e72bacf4370e8d8f8
Size

76KB
MD5

915bacf82ca5e782edb1dd0641b3cd97
SHA1

d6db97564a610f782584234a9bf9b005eae50f5e
SHA256

164791d82dbae9a2f396e506c2a637e565937f92bfa08d5e72bacf4370e8d8f8
SHA512

d5e0b9ae2b7f97b440c6a542cf8756e4a1ba77956368b5c7852c6f45bbc5f30c60cb64c9f80bfb926f172ebc17adce0bc07ecb995c2ca316522b0f47e8b87d5d
SSDEEP

1536:7G3NWtKW1ngkke7ZR8LSJeu4hVGRkON8EBPpjVrs2ryrd1vUQuq6:sNWtKW1zLZa4QY8YHs2qo

Score

N/A

Malware Config

Signatures

Files

164791d82dbae9a2f396e506c2a637e565937f92bfa08d5e72bacf4370e8d8f8
.exe windows x86

ef6c3999e94a3dea8f12076f42f445e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetWriteWatch
CreateWaitableTimerA
RegisterConsoleVDM
SetProcessDEPPolicy
LeaveCriticalSection
HeapCompact
CloseHandle
SetFirmwareEnvironmentVariableA
BaseUpdateAppcompatCache
InterlockedDecrement

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE