998696fcb0bc39f31d03e6c84b74a5d2dc6075f18927b73b86af81463a810093 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

998696fcb0bc39f31d03e6c84b74a5d2dc6075f18927b73b86af81463a810093
Size

92KB
MD5

3a39c688c1f559fa71f0f00134dc1523
SHA1

e6a2b6eceaf21850fb7e530279c7d35dc4aa8d0a
SHA256

998696fcb0bc39f31d03e6c84b74a5d2dc6075f18927b73b86af81463a810093
SHA512

56dbc9017102d5985ab9d9c429f31ef5484ae97e8c1d0685696d7c38491a624d6a9d0286a58a6f364e35775ccc687522ffdddb9fa59166088a12849b4fdf58ae
SSDEEP

1536:GYj9URcUL9ndXt1kZG+LeNV0tTejf1urd44jH8qdTbPXf0QjzZ83YacIyP/69QAU:r9VUL9dt1kg+LBSjdu6gc2sQJKYBbWqP

Score

N/A

Malware Config

Signatures

Files

998696fcb0bc39f31d03e6c84b74a5d2dc6075f18927b73b86af81463a810093
.exe windows x86

41d7f0c11f95726c04db002b627a1027

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalMemoryStatus
OpenFile
CancelIo
EnumSystemCodePagesA
CreateDirectoryW
GetConsoleKeyboardLayoutNameW
FindFirstVolumeW
VerifyVersionInfoA
ReadConsoleOutputW
GetComPlusPackageInstallStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE