76e272857bbb0e6a28b64a868c848d19c1f822773d409227c73004a3be73fd3f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76e272857bbb0e6a28b64a868c848d19c1f822773d409227c73004a3be73fd3f
Size

368KB
MD5

23ed2f2f99179e6f4b233d14a4a47681
SHA1

77dee2c1e2114d853ede4bc55254ebfc9c9c4d53
SHA256

76e272857bbb0e6a28b64a868c848d19c1f822773d409227c73004a3be73fd3f
SHA512

0efc4b1f802c97030c766af79dfb0f98fa3d7a7c19763a65a61bc3acec81b0b5c9583f9773e727e9ad7d704686d5a20f0439fa8479f6807654d192d79f77b78f
SSDEEP

6144:RhteBdbInxC7yp3nfcrW1f70TNx3bI0dWo8C2Mzlo2VoQ4rOjy46a/YrR/Jn59+u:RhteBd0nxC7C3nf6nTNx3bI0dWH0Olrt

Score

N/A

Malware Config

Signatures

Files

76e272857bbb0e6a28b64a868c848d19c1f822773d409227c73004a3be73fd3f
.zip
gospoda_tfile_ru.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 446KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ