c863aee6316f00b374fc3fd667d946f92ab580504b2bc221a06ede492373c023 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c863aee6316f00b374fc3fd667d946f92ab580504b2bc221a06ede492373c023
Size

368KB
MD5

d4ed03ff962d042e1d321de51d162009
SHA1

d6a4a6acc38e31ed0d236cecd0477a67198a7ece
SHA256

c863aee6316f00b374fc3fd667d946f92ab580504b2bc221a06ede492373c023
SHA512

353fd4726cdc0e3cd53c64427df19f87db21da9ac00f054e3c1de6dc68231617d1522d4277eaceafac935e18fc62447fedb02173aab6bcc3bd09981da9e313c2
SSDEEP

6144:MCalDFM+mKHtuaBd5aTDRFx/UVWwgKcaLBYdO4QzghuteUA3KT2U4Y+gxry2xdIP:MvrmtaBXcVjulgKcaLa3JhuteUY02Uve

Score

N/A

Malware Config

Signatures

Files

c863aee6316f00b374fc3fd667d946f92ab580504b2bc221a06ede492373c023
.zip
ned_kelly_tfile_ru.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 446KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ