e4986e5839f3766b5747361209fe08eb026786d97038c5565fb4da9e739c1092 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e4986e5839f3766b5747361209fe08eb026786d97038c5565fb4da9e739c1092
Size

111KB
MD5

2f53e73dfa2aaf5f616ba4414f542c95
SHA1

de80c1e7d42b43f70b01d877c0c8060acc675c7a
SHA256

e4986e5839f3766b5747361209fe08eb026786d97038c5565fb4da9e739c1092
SHA512

e002b4738364bf8cc4c6dabbecac4d90b005387c7024ee56872321ec7d26dee37b6525fb78c169a1b6fafe3e8749fec76b5393ada763ec8dca9dd5019689ebcb
SSDEEP

3072:u8ZK8VZ6j+ZKKXVm4tfJJIDS/Ul9B0jheSv:uGAiwKXVm4v0EjN

Score

N/A

Malware Config

Signatures

Files

e4986e5839f3766b5747361209fe08eb026786d97038c5565fb4da9e739c1092
.exe windows x86

7a8690dca6cb878b3ad69661ac18c4cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
OpenMutexW
EncodePointer
lstrlenW
lstrcmp
BaseFlushAppcompatCache
GetProcessIoCounters
GetAtomNameA
IsProcessorFeaturePresent
GetConsoleAliasExesLengthW
RegisterWowBaseHandlers

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 97KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cduupqo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE