631a5324939a71be4cbb96c0a7c9fe3a47fb38247ab7469e3459c6ca1f492a88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

631a5324939a71be4cbb96c0a7c9fe3a47fb38247ab7469e3459c6ca1f492a88
Size

67KB
MD5

e545ff5048d22fc99df4935505a5b91a
SHA1

25bc6fb20128daafc97a275cd1e5d99927f5a5e2
SHA256

631a5324939a71be4cbb96c0a7c9fe3a47fb38247ab7469e3459c6ca1f492a88
SHA512

f02de36a73937ebce2c69dd982ea4765251add91a5965b185ec73627c06e8c2c617a8df4ad38986dff2bd185b5ace683b26d5f7bf1ec49301dfab47d1d25eb98
SSDEEP

1536:5ugAmBDYHXIpnn0ZaOmq4CprBPuOdObdzqPNIKvA4VDuqA4Soi9HzK:fDY3Ipn0ZaOZ4CprdwbUPeK441P72K

Score

N/A

Malware Config

Signatures

Files

631a5324939a71be4cbb96c0a7c9fe3a47fb38247ab7469e3459c6ca1f492a88
.exe windows x86

b74a5450bc78fe3edab354cee9454201

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
WaitForDebugEvent
SetHandleContext
NumaVirtualQueryNode
GetQueuedCompletionStatus
GetDiskFreeSpaceW
GetVolumeNameForVolumeMountPointA
FatalAppExitA
VirtualFree
PrepareTape
RemoveDirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE