e0c35d03135216f79174461839c9739d7a73578cbf85e8676620035370d979ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0c35d03135216f79174461839c9739d7a73578cbf85e8676620035370d979ee
Size

92KB
MD5

3d33f7e447deb3e9cb205c7151240e96
SHA1

96d72d4f0e5590de8c2d69211ec296537d537cfa
SHA256

e0c35d03135216f79174461839c9739d7a73578cbf85e8676620035370d979ee
SHA512

7e3e743a94cb28f01138ef26bde21728abd780f6db5b9dc0b028b1a1c9ee41bf736a0479116922206f8235cf80e2067c3fb83dd740abd9ce0c18603ca7336f5f
SSDEEP

1536:Ffvi1rt0mpiF8OAutaTsA0c0bJFFah14eW7M5f6VpjEErxTWDTMqhGKYIZTET8uQ:Ffvi1rONTc09Dar4eEg6VpjBkMqhGKZw

Score

N/A

Malware Config

Signatures

Files

e0c35d03135216f79174461839c9739d7a73578cbf85e8676620035370d979ee
.exe windows x86

f0a354671c11bd899344a956ea9dfa9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
VirtualProtectEx
GetSystemWow64DirectoryA
ReplaceFileA
EndUpdateResourceW
QueueUserAPC
SetVolumeMountPointA
FindFirstVolumeW
WritePrivateProfileStructA
CancelDeviceWakeupRequest

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 26KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE