ae35eff4075967514d81cde089b931d8b982653a729e8022a1490bc1b61a1533 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae35eff4075967514d81cde089b931d8b982653a729e8022a1490bc1b61a1533
Size

56KB
MD5

8e1688f4f691070fb9e9812ad16c7b4a
SHA1

4f07180f4e24c340714acb608ea321d04a97cd2e
SHA256

ae35eff4075967514d81cde089b931d8b982653a729e8022a1490bc1b61a1533
SHA512

dcf646d991b91a4bf7b933a716e75edb3b401e94003c8460dabfc3319968b3fe561b43b0f691faa67ad682140dc269cc12246931c793002258e7e6cdb9a78905
SSDEEP

768:Sj5H1w0qc0utgdPRedL3BDUm1VsFbBa8Ryr7gIjPakKDv+WTrjHZ1VUZiSp6:UZAP0nDt16FbBacyr9jPeDv+E3H6ER

Score

N/A

Malware Config

Signatures

Files

ae35eff4075967514d81cde089b931d8b982653a729e8022a1490bc1b61a1533
.exe windows x86

219a00b115f14dcb986d76f3c0ac8563

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WTSGetActiveConsoleSessionId
EnumSystemLanguageGroupsW
MoveFileExA
LoadModule
LockFileEx
GetCPInfo
TlsAlloc
RemoveDirectoryW
DisconnectNamedPipe
SetCommBreak
WaitForMultipleObjects
TlsSetValue

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE