f50989abb03eef9ec59f0dbf8ca601feb8d5e76b8cd0e5de72cbd5b6b1baca8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f50989abb03eef9ec59f0dbf8ca601feb8d5e76b8cd0e5de72cbd5b6b1baca8e
Size

91KB
MD5

26f8cc4058916a54878e9ed6f45efd74
SHA1

5a6d5300653e2e616340d251b3f37cb31496bc08
SHA256

f50989abb03eef9ec59f0dbf8ca601feb8d5e76b8cd0e5de72cbd5b6b1baca8e
SHA512

1399999f0d838b4c3a79b3e02a6593a2c9c57d3de4d9b45676e5901d54a8a3cf0647be56122e7c871534e6a16fc8b0f41ebeb050b68dcc03cd37713b505d4dad
SSDEEP

1536:XItPBMi59v8yriJMT8AKT1fY2s29nLFAuRJoWuRc2kY1UAcIGUwybjYtUV:XIth59JWakfYi6SJo3kYlmdYjY2V

Score

N/A

Malware Config

Signatures

Files

f50989abb03eef9ec59f0dbf8ca601feb8d5e76b8cd0e5de72cbd5b6b1baca8e
.exe windows x86

3b251fea75e3cc2979c8a7f8e6e61a94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointW
HeapQueryInformation
DebugBreak
TermsrvAppInstallMode
MoveFileWithProgressW
UnregisterWait
MoveFileExA
InterlockedExchange
GetTapeParameters
GetVolumePathNameA
AllocConsole

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE