dab491823de9ac44c97b5fbf3a1ed7441f82c65d55cbe8aa2c88840117ed7796 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dab491823de9ac44c97b5fbf3a1ed7441f82c65d55cbe8aa2c88840117ed7796
Size

92KB
MD5

0bb1fb92f72b77fa01d537abd8bf1981
SHA1

6a8198fda59a41fb59e32209ce0530dc04e5ad10
SHA256

dab491823de9ac44c97b5fbf3a1ed7441f82c65d55cbe8aa2c88840117ed7796
SHA512

cb9fd0af2b84a0c6fd40dfc27d20630b3f59bec2fe7eea0c379e7063cf0b46f2a62be3930d771bc71bcf0291c4f958802c6f7414683aecbe6cff9cacd6cac087
SSDEEP

1536:p4hooXEZREKYKvvkSSTiFjm01zxxvYXjEErxTWDTMqhGKYIZTET8u5j65UlFWh8u:p4hooXgZYKvcSRRLzxxvKjBkMqhGKZTs

Score

N/A

Malware Config

Signatures

Files

dab491823de9ac44c97b5fbf3a1ed7441f82c65d55cbe8aa2c88840117ed7796
.exe windows x86

d1d2453b55908de29fd7402fac11ca9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ContinueDebugEvent
HeapUnlock
EnumUILanguagesA
MultiByteToWideChar
Heap32Next
SetThreadLocale
SetFilePointer
VirtualQuery
BaseCheckAppcompatCache
GetProcessVersion
CallNamedPipeA
SuspendThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 26KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE