bb4914d791bfa81025872b25973d5874536d65703ec9a0c10ce1740ac8ab27cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb4914d791bfa81025872b25973d5874536d65703ec9a0c10ce1740ac8ab27cd
Size

91KB
MD5

3cd09d26fa51441498f111278698915c
SHA1

e0344691ffbd33c19489194ea09188dda32ac027
SHA256

bb4914d791bfa81025872b25973d5874536d65703ec9a0c10ce1740ac8ab27cd
SHA512

1c791eaf9b5062370a41b7da6ba05db0e8d003c38637606e35bf732326c8ed54a294388566bf1273c6cd636d07558ce1e7c7ad48f9421f37a9408e691d01c9ee
SSDEEP

1536:UnMcXALoey4EVO4lKlaPw6ZSkf8mhoXvnXNlBCJmPWR6cdOwd1:gMcXALRyQ4El2Zzf8Yo/nXemPy6UOwd1

Score

N/A

Malware Config

Signatures

Files

bb4914d791bfa81025872b25973d5874536d65703ec9a0c10ce1740ac8ab27cd
.exe windows x86

d73c100938e0ee147791cf803a940b46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByteEx
RtlZeroMemory
LZStart
FreeEnvironmentStringsW
SetEnvironmentVariableW
GlobalFix
GetProcessDEPPolicy
GetNumaProcessorMap
GetProcessVersion
SetLocalPrimaryComputerNameW
ResetWriteWatch

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE