a59bfbd98dc33f366733254338a84b170003342360ffbdf94c6d1df40f06ebac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a59bfbd98dc33f366733254338a84b170003342360ffbdf94c6d1df40f06ebac
Size

63KB
MD5

f7068a8ec5e6cda23f76a65b8dfd77f9
SHA1

37e9ac36e0ec7c3264c632797b8e216ac443b371
SHA256

a59bfbd98dc33f366733254338a84b170003342360ffbdf94c6d1df40f06ebac
SHA512

67dff433dcc74672f5d140c2740d80b256c5600298209b1ee115fd2ff686d732c76298c05348c1932bdc686253c9dc67871a8e896ce704bc92d6b54b9ef56365
SSDEEP

1536:wKa+QNtLYMe2vnGYUs005AjVl1rUJhGeRufIZHrAqNOj:/a+gxY72vtU5bVfshGeaIlrANj

Score

N/A

Malware Config

Signatures

Files

a59bfbd98dc33f366733254338a84b170003342360ffbdf94c6d1df40f06ebac
.exe windows x86

1ec4a5f2fa65a6f6cf91593222b0abe2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
RemoveVectoredExceptionHandler
LockFile
VerifyVersionInfoW
ActivateActCtx
WTSGetActiveConsoleSessionId
VirtualAlloc
FindNextVolumeMountPointA
InterlockedPushEntrySList
GetNumaProcessorNode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE