953b8f094378c58cd23c64dd3c9bbf91f56cc7bea42713e0105f3a7153ed1aac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

953b8f094378c58cd23c64dd3c9bbf91f56cc7bea42713e0105f3a7153ed1aac
Size

63KB
MD5

4a7d8c64c2d954aa40842c2245ed132f
SHA1

becd086b1e149ed8018f30a56d6ed7ae87b4f600
SHA256

953b8f094378c58cd23c64dd3c9bbf91f56cc7bea42713e0105f3a7153ed1aac
SHA512

10d49be4aaecd877718304b16652222735982b51a88bc4a5e675e45d9e3a391e63c645b9458bd040232281da13bb9a30d50adbc91897d86151f71d8b415467d9
SSDEEP

1536:3WvFr+nc0d0m3lFPow53PUxzWOqxQmh4C8kmoqZssd0dXFZxn:Gx+vdh3DPoc3SzWOqxQ/xkmoqC/XFf

Score

N/A

Malware Config

Signatures

Files

953b8f094378c58cd23c64dd3c9bbf91f56cc7bea42713e0105f3a7153ed1aac
.exe windows x86

ceaaaa6bf7cd8b2746a7e23dadeac68b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VDMOperationStarted
InterlockedPopEntrySList
ValidateLocale
OutputDebugStringA
GetTimeFormatW
OpenProfileUserMapping
LocalUnlock
OutputDebugStringW
RegisterConsoleIME
EnumDateFormatsA
EnumSystemLanguageGroupsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE