968b54fffa0235dfb851e7f466ebdb4813f4f42b18fbcc9f1d84c8d2e32a05f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

968b54fffa0235dfb851e7f466ebdb4813f4f42b18fbcc9f1d84c8d2e32a05f4
Size

56KB
MD5

acabbe81d3473f3bf2b69c13dbcc7a2e
SHA1

f16c142850e02da53b49abb4b339b25be77717d9
SHA256

968b54fffa0235dfb851e7f466ebdb4813f4f42b18fbcc9f1d84c8d2e32a05f4
SHA512

67b2ce1b2cd9bb64381308daf63b335fef9ac9ad59c22926b71ab48cc85bac22dfca84318d4178690ee472f207fccd9296c059c3fd865ca3daf7d3318602dd4d
SSDEEP

1536:gPUErJeqldXJjJWE8UFczH0TjK3c+FOXyybWJP12f7:gDXKUFc5s+ciJP12f7

Score

N/A

Malware Config

Signatures

Files

968b54fffa0235dfb851e7f466ebdb4813f4f42b18fbcc9f1d84c8d2e32a05f4
.exe windows x86

0ebcfeec8be05f0214c3a4f0338937ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrencyFormatA
GetVolumePathNamesForVolumeNameW
GetSystemDefaultUILanguage
InterlockedCompareExchange
SetConsoleCursorMode
RemoveLocalAlternateComputerNameA
SetProcessWorkingSetSize
SetFilePointer
FindActCtxSectionStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE