c1ef860144a1be6df1841bfbc390975e4272febfc88534af0d8f47dbd9afa530 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1ef860144a1be6df1841bfbc390975e4272febfc88534af0d8f47dbd9afa530
Size

76KB
MD5

46a9a4a94778b3e469f07963652a03fd
SHA1

a0d83faf081b46a9e3e03dcaddb7a2533966ff92
SHA256

c1ef860144a1be6df1841bfbc390975e4272febfc88534af0d8f47dbd9afa530
SHA512

bf2248f3df2afbea04066722b25382e95d8f03422ab3174ac34ec5fc8eafc0b5ae7a55739c31efa8d71de8ee202aa2a42d42759638cbaa9bd5b71d91fb64a335
SSDEEP

1536:6qu8tS+2UVoKdeVamVA60zovjepzWJ6H/pjVrs2ryrd1vUQuq6:638tIUVoKIlVA6GobepPHs2qo

Score

N/A

Malware Config

Signatures

Files

c1ef860144a1be6df1841bfbc390975e4272febfc88534af0d8f47dbd9afa530
.exe windows x86

ee9e435c2b8d61e82abb381fa447a972

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualUnlock
RegisterWowBaseHandlers
CommConfigDialogA
FindAtomA
GetCurrencyFormatW
GetSystemDirectoryW
RegisterWowExec
GetConsoleAliasW
GetLongPathNameW
EnumCalendarInfoW
GetDllDirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE