face9daf14124f46880c69fa978ee00021d1f5e90a18d66821db59fe63dc6b0e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

face9daf14124f46880c69fa978ee00021d1f5e90a18d66821db59fe63dc6b0e
Size

138KB
MD5

6444216354eaee9d91f3c489a3ff3e33
SHA1

1f026860dc13e7af718dbd185a72421fb6bc79a9
SHA256

face9daf14124f46880c69fa978ee00021d1f5e90a18d66821db59fe63dc6b0e
SHA512

893dd9bf5aa28a4d4e6ed8cd598dcecfae8514dacea4d8539672286aa1937969b964598f401d4ff5e846fdba9543b574f6c16d92d30bb3d4902a8062f68838e4
SSDEEP

3072:rZXR4Rs3TVqmgZy1OoAK3hyTz66qkknID5zBQu:rjVqpIo9KxyH66qNID5dH

Score

N/A

Malware Config

Signatures

Files

face9daf14124f46880c69fa978ee00021d1f5e90a18d66821db59fe63dc6b0e
.exe windows x86

4310dad400d93b4e4f05f962e6cc9eb8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleW
VirtualFreeEx
VirtualProtectEx
VirtualAllocEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ