ad62c6abfb5ffc3721061ca919606e4105ab2402b32b3083a0b1202bb8d98798 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad62c6abfb5ffc3721061ca919606e4105ab2402b32b3083a0b1202bb8d98798
Size

119KB
MD5

01f268f80b2b81ea64d962152810919f
SHA1

15285cbc6373d465501bffe50b4e831f8c12602d
SHA256

ad62c6abfb5ffc3721061ca919606e4105ab2402b32b3083a0b1202bb8d98798
SHA512

5eefdf37be5cda19107880cc6140e5beb2ddb56af00e1e57684adac3e39adbec56b4a5300b75c23e0b4b9b610efb89dc2304694be33f3493e379b7c48db33e0b
SSDEEP

1536:UUx2MPI89nrV2aX2qvpVR3AOMklZdLNiWQmaZoNspjVrs2ryrd1vUQuqSSqK5tnU:7x2MPHpXjBvZlZdRQZJHs2qxnC

Score

N/A

Malware Config

Signatures

Files

ad62c6abfb5ffc3721061ca919606e4105ab2402b32b3083a0b1202bb8d98798
.exe windows x86

f0fcbc8b88543474fd68ed23040fae5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EndUpdateResourceW
OpenWaitableTimerA
Thread32Next
GetQueuedCompletionStatus
EnumResourceLanguagesA
lstrcpyA
GlobalGetAtomNameW
IsValidUILanguage
NlsResetProcessLocale
TermsrvAppInstallMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE