fe96479e30d393ed005658559b7375e5bab13f5049fc3b5739c56507706fa60c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe96479e30d393ed005658559b7375e5bab13f5049fc3b5739c56507706fa60c
Size

91KB
MD5

06bc6306ec18b5a99b33ea1eff5bd042
SHA1

7716f161de5447868de25dea7fedc6d36ab20e90
SHA256

fe96479e30d393ed005658559b7375e5bab13f5049fc3b5739c56507706fa60c
SHA512

68065ddd2762e5b71266773911b60079370479d2269655a255a274ae8a1265447c862801ed05d9a8dc3677c09d29ff525ff5615b659d4919adaac3dbb8fbb52c
SSDEEP

1536:N/SQha3xes5Bnezh9wAhJ6gzbYonQsHB56Iz7vTxSuCOeMT6B:N/doegBAh9DhJ6g4GLj6MNS3OeMI

Score

N/A

Malware Config

Signatures

Files

fe96479e30d393ed005658559b7375e5bab13f5049fc3b5739c56507706fa60c
.exe windows x86

688464ff603733e0d09475e918413907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
GetTapePosition
MoveFileExA
HeapCreateTagsW
VirtualAllocEx
CreateRemoteThread
ResetWriteWatch
GlobalReAlloc
GetVersionExW
SetComputerNameExA
GetEnvironmentStrings
GetThreadLocale

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE