ada748f67c35e80f36bc145d37698264f2a1525311b502cf00a079daed8b4d8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ada748f67c35e80f36bc145d37698264f2a1525311b502cf00a079daed8b4d8b
Size

511KB
MD5

88d6ff863e03251cec7825c30a51dbfc
SHA1

de923d3caeb1a29fee57914656aa00f4bbd6e5f6
SHA256

ada748f67c35e80f36bc145d37698264f2a1525311b502cf00a079daed8b4d8b
SHA512

30d5433f5effc1b9bb021dfcd82005ea09e41576ea044e420af83ffb9828438cd5697a60198e54384377f4b1e112fc8d7b27ae4d6f35019cf0d3ad901823666b
SSDEEP

12288:mQfIPIJD1gIbDzr5YqFVqI6DrC4xygTIxLFnxPQUXQZg:TwgR35YqFDeC8I1Fxjm

Score

N/A

Malware Config

Signatures

Files

ada748f67c35e80f36bc145d37698264f2a1525311b502cf00a079daed8b4d8b
.exe windows x86

11f663086eb7da7e9a9e7e549698fa00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameW
FormatMessageW
GetTimeFormatA
LeaveCriticalSection
SetCurrentDirectoryA
GetDiskFreeSpaceW
GetStringTypeA
GetCurrentProcess
VirtualAlloc
GetModuleHandleA
RemoveDirectoryA
GetFileTime
LeaveCriticalSection
Heap32First
GetLocalTime
GetPrivateProfileIntW
Sleep
InterlockedExchange
FindNextVolumeA

certcli

CADeleteCA
CAEnumNextCA
CADeleteCertType
CAEnumFirstCA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.IDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZDATA
Size: 499KB - Virtual size: 780KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ