ad17e1f538c3a71a60db3ae7dafcc164c9acc0ec92c1820bd370beb51000cc68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad17e1f538c3a71a60db3ae7dafcc164c9acc0ec92c1820bd370beb51000cc68
Size

62KB
MD5

f78d9803562f035cecdf0532d6f7be2b
SHA1

5fd617deb0ddb9649ca271cb735c67672e64542c
SHA256

ad17e1f538c3a71a60db3ae7dafcc164c9acc0ec92c1820bd370beb51000cc68
SHA512

2ea10abd78ee7badbfd3f373c00214deda2680646909c6b8f28a69eddc1d89da61b073e50d1783af1ba5a472951cf048f9a4112f01a03c035d45cb401ffb1e9d
SSDEEP

1536:YQS1tpOP3AaUdWtcZYqK7dk3tHFBIHLChsrhuH:YDM2WWVK7dk31HIGhs9uH

Score

N/A

Malware Config

Signatures

Files

ad17e1f538c3a71a60db3ae7dafcc164c9acc0ec92c1820bd370beb51000cc68
.exe windows x86

4248c9b7c5fab9337220ef06b38731d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReplaceFileA
GetNumaProcessorNode
SetErrorMode
GetDevicePowerState
InterlockedExchangeAdd
LoadLibraryExA
GetCommandLineA
FindFirstFileW
TransmitCommChar
CreateFileA
EnumResourceNamesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE