ad5ed5af4fa60aa39a43a5e007289f771fb1f292731c10468e03e89b0650c14d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad5ed5af4fa60aa39a43a5e007289f771fb1f292731c10468e03e89b0650c14d
Size

24KB
MD5

d12f169deea519d0f247b1af7e65e035
SHA1

faae83930af34372557e801678e7e367f60e2382
SHA256

ad5ed5af4fa60aa39a43a5e007289f771fb1f292731c10468e03e89b0650c14d
SHA512

8da39533a817b02d266b8b04c12fd1de5323fb09045615d1649efc67dfe9e1868f906ef956062e91cc7d338e08e5c02b8886e8c2f5b9389fd696eec69f24a82f
SSDEEP

384:E5FkYNS6N4nOL/qZDnaXmGymFuA8lSQSoH+fuksvOkb0DS5W:KFkmN4nOru0GU

Score

N/A

Malware Config

Signatures

Files

ad5ed5af4fa60aa39a43a5e007289f771fb1f292731c10468e03e89b0650c14d
.exe windows x64

9961629e3211a7c38d0fd31e619b0500

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

cs.w10

RHBinder__ShimExeMain

Sections

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ