b56ca80f24421426f85df6a0c2182277ad0738554a4694945352f82c85ae64e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b56ca80f24421426f85df6a0c2182277ad0738554a4694945352f82c85ae64e9
Size

119KB
MD5

a1fb095a1580830e09b930eafcbab405
SHA1

89c3d31d22b910e9295adb908fbb7218ed032c68
SHA256

b56ca80f24421426f85df6a0c2182277ad0738554a4694945352f82c85ae64e9
SHA512

25d449dae57383e20303dfce47daa4b2162e6c0e3e62c1b46cce3ee13de263bb096d385fe7447407d0f883760a71749efaf135cecaf42a6b4fbec13aa5269f49
SSDEEP

3072:R11Rsip04YeF7sZNt94dH6KJaSKyTLAueF9Q6oA/8106E5X8JZ8XNY:RDtW4YS7OtqdaKUSPLReF973/PCF

Score

N/A

Malware Config

Signatures

Files

b56ca80f24421426f85df6a0c2182277ad0738554a4694945352f82c85ae64e9
.exe windows x86

eaa7f5e4a41503c68a527e713f43807d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWaitForSingleObject
PrepareTape
SetCalendarInfoW
FreeLibraryAndExitThread
GetStringTypeA
LocalShrink
GetStringTypeW
TrimVirtualBuffer
BuildCommDCBA
VirtualQueryEx
LocalFileTimeToFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE