1499ae0ed98ade42a06cfb81f7cdc0110ed8fbbef1fd560380a363b1d0a3f5b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1499ae0ed98ade42a06cfb81f7cdc0110ed8fbbef1fd560380a363b1d0a3f5b1
Size

71KB
MD5

022560e8e62fd37c61ae21d20dfdb901
SHA1

1a8d147b980b1599b0f9839b1c15e8fff7fcb9c2
SHA256

1499ae0ed98ade42a06cfb81f7cdc0110ed8fbbef1fd560380a363b1d0a3f5b1
SHA512

8e9663834b20d2cfd47e2c492e77673c174a6307876e0590c6bcc2e6621d7a4005831571469fb4c9b5a9b18522c76883f25be82f721338ac35c507bd25c173d2
SSDEEP

1536:K9NnUFgNCWvonPHDs7nvEeI2+FlKAoCaScxM1loqNnqe2Hk:KnsgECvtmYMzZqLE

Score

N/A

Malware Config

Signatures

Files

1499ae0ed98ade42a06cfb81f7cdc0110ed8fbbef1fd560380a363b1d0a3f5b1
.exe windows x86

e3cd8c9a5c1212b593d519e830195e01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddLocalAlternateComputerNameW
lstrcpy
FindFirstVolumeW
CreateProcessInternalWSecure
ValidateLCType
EnumCalendarInfoW
GetProcessVersion
FillConsoleOutputCharacterA
GetOverlappedResult
EndUpdateResourceA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE