b56f4ca8e387cea2bcc32c23df4496c1d9f5b6247c80601da4bb53b9760ea086 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b56f4ca8e387cea2bcc32c23df4496c1d9f5b6247c80601da4bb53b9760ea086
Size

76KB
MD5

580c95bb1b8da9859c07dc9910fa5ccb
SHA1

138258b72e56da1a25206efee10386fa8dbea736
SHA256

b56f4ca8e387cea2bcc32c23df4496c1d9f5b6247c80601da4bb53b9760ea086
SHA512

1a1cc455e49f9cbeab96aedc3df299fa87536ecec1896037d748821d9d52e5daa7c34bb8c1c5a10eac63f80646e8d3983eae75897bf8972c14a51b37a4e1ca1d
SSDEEP

1536:q7EncuignMjt2XQSr6UW6idmr5IrdjKw+iLDjc9FQAEvujpjVrs2ryrd1vUQuq6:BGUW6KmUqco9FHLjHs2qo

Score

N/A

Malware Config

Signatures

Files

b56f4ca8e387cea2bcc32c23df4496c1d9f5b6247c80601da4bb53b9760ea086
.exe windows x86

a77a8cd7a4adb2f4ef8946982394f9d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Thread32Next
DnsHostnameToComputerNameA
Process32NextW
IsBadWritePtr
QueryWin31IniFilesMappedToRegistry
lstrcmp
DnsHostnameToComputerNameA
GetVDMCurrentDirectories
GetOverlappedResult
FindFirstVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE