b28e6e75e6987277b182a313273932c123922d8c8635ef0c63337df610756f8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b28e6e75e6987277b182a313273932c123922d8c8635ef0c63337df610756f8e
Size

84KB
MD5

5303bf3d7223661e0fbcab91957acb30
SHA1

bab62a2bf4198fadcb119859f17f92e83f0c2b88
SHA256

b28e6e75e6987277b182a313273932c123922d8c8635ef0c63337df610756f8e
SHA512

555637f0ff67ddd7cefbf03eb88740995dc1b8d1ee8b47a5bfcb22dc05d131d03fdd1f90d101e2da247f15dfe572e482128c3b3a69294e9630c85e2a341b0a6c
SSDEEP

1536:kgqLFubqOJiUkY8eMDFke0ihLptN2d6EpliDcYxlj2g7PZR+eTJ/:uFArRmZmihF3SLuHSuH+6

Score

N/A

Malware Config

Signatures

Files

b28e6e75e6987277b182a313273932c123922d8c8635ef0c63337df610756f8e
.exe windows x86

62873522e33fdf6c0d14c1caa3e506f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
BackupSeek
Heap32First
RegisterConsoleVDM
CreateTimerQueueTimer
CreateProcessInternalWSecure
CompareStringA
FindFirstFileA
BaseAttachCompleteThunk
TryEnterCriticalSection
FindNextVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE