68e87d49f1b936e9dfe15c16cdc18a163238ea01caf46b01146e1c4e9abd3409 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68e87d49f1b936e9dfe15c16cdc18a163238ea01caf46b01146e1c4e9abd3409
Size

60KB
MD5

16ca101a388a5756161f3eb6c968d290
SHA1

331561c6302450ac7444edfa095943809deade8c
SHA256

68e87d49f1b936e9dfe15c16cdc18a163238ea01caf46b01146e1c4e9abd3409
SHA512

a0eed49679f758838a133ab8fc447818ee7d013faa0d0228c3320f6923777bd5d4994f05459cec9a3618c84cb00afda54a3db94f9a5d51e3afb9ae4f70f0e91e
SSDEEP

1536:ZmU6S6SnyDyjcIRqrY5uGmyYpiAX33gSkWY:yS6IywcI4cu9p533gS

Score

N/A

Malware Config

Signatures

Files

68e87d49f1b936e9dfe15c16cdc18a163238ea01caf46b01146e1c4e9abd3409
.dll windows x86

93fab0ca880e087873231906613abdb4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
HeapReAlloc
HeapDestroy
OpenEventW
FindResourceExW
FindResourceW
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
PulseEvent
OpenSemaphoreA

rpcrt4

NdrAsyncServerCall
NdrServerCall2
RpcStringFreeW
RpcServerInqBindings
RpcServerUseProtseqW
RpcAsyncCompleteCall
UuidFromStringW

Sections

.code_01
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ