97f96577a76b97cc0d8fbee8f82cdc0776d84e553ce73f3241acf09d98d569ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97f96577a76b97cc0d8fbee8f82cdc0776d84e553ce73f3241acf09d98d569ec
Size

63KB
MD5

62016d9a744abcc2e1c3161934f0b095
SHA1

1a463f15e6ee92a54eab28e224f95b7be2269ac9
SHA256

97f96577a76b97cc0d8fbee8f82cdc0776d84e553ce73f3241acf09d98d569ec
SHA512

2a3864053b7d5a7710a3c0894f56d32d6edfe85ff491c2255df1220c3a103d2fadd101341e692b3591032b4766b3cb11ba8be659c1e771f24cec8695ecba0ec2
SSDEEP

1536:LysN5xLQUifQO5HjDnIs2GYkViXQxSA/kalI6bUUu0NbAMp:LyO5xUUifDnZ2G1oXqSA/kaKSzbVAMp

Score

N/A

Malware Config

Signatures

Files

97f96577a76b97cc0d8fbee8f82cdc0776d84e553ce73f3241acf09d98d569ec
.exe windows x86

aa8c904c0b09513d909a2bdd0f3babc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerSetConditionMask
NlsResetProcessLocale
VirtualLock
GetThreadLocale
LockFileEx
FatalAppExitW
FindNextVolumeMountPointW
ChangeTimerQueueTimer
GetStringTypeExW
GetSystemRegistryQuota
lstrlen

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE