ad023789fa90318661a314d4e526509ff35937751f15f7591fd12b3b4adb1850 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad023789fa90318661a314d4e526509ff35937751f15f7591fd12b3b4adb1850
Size

119KB
MD5

63bc65b880ab45fe1674d0c51c26ddad
SHA1

6d3164556103ccfc481dcf334c025afdd453f46d
SHA256

ad023789fa90318661a314d4e526509ff35937751f15f7591fd12b3b4adb1850
SHA512

b1dd9312a1820c2d33b49985d232c92ec78c022904cfd72492c87efe7526ea3d21cfe712661531c1c228772c1128e90761e544045ad5c6d1a617bd1fdc4f64a3
SSDEEP

1536:M3e7Kj60ThAMBbtLq1T9BbK1BBBl4G0k6q60P7pjVrs2ryrd1vUQuqSSqK5tnCvv:MOYtVS9BbOl4G560DHs2qxnC

Score

N/A

Malware Config

Signatures

Files

ad023789fa90318661a314d4e526509ff35937751f15f7591fd12b3b4adb1850
.exe windows x86

a844adc8eee30f91d342ebf6197060ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugBreakProcess
GetEnvironmentVariableW
GetOEMCP
FreeEnvironmentStringsA
MapViewOfFile
GetConsoleAliasA
LeaveCriticalSection
LZClose
DecodePointer
GetDllDirectoryW
CreateFileW
FindFirstVolumeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE