1f36ee8cf37ece876656c635cfaee43e4f26b99abeebeeba7d965047b886e66e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f36ee8cf37ece876656c635cfaee43e4f26b99abeebeeba7d965047b886e66e
Size

58KB
MD5

30c0d03a07f301b84ee5d22be253df7c
SHA1

e0346360af473e90b3c54b3445e2f9847fe53bba
SHA256

1f36ee8cf37ece876656c635cfaee43e4f26b99abeebeeba7d965047b886e66e
SHA512

f601789a5b4457a2ffa9c5d3027b9122440ffa8de5ba06ef378b419cb5e60e6d11020120f4a93b710eacc1018e2c2fdf96cf765c7774792dd8b54c40ee74a270
SSDEEP

1536:0lJtSsQGjg3eJb0SDT3B3+SZcETq0gWI/eM:0lJtSsQGSeJb0wBbcETq+BM

Score

N/A

Malware Config

Signatures

Files

1f36ee8cf37ece876656c635cfaee43e4f26b99abeebeeba7d965047b886e66e
.exe windows x86

f92b042771e5c773b0cc6bfe19816f0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointW
LockResource
lstrcmpi
GlobalUnlock
Toolhelp32ReadProcessMemory
lstrcatA
GetProcAddress
SetErrorMode
SetConsoleNumberOfCommandsW
DosPathToSessionPathA
GetExitCodeProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE