79a5ac97f912d7dd037a289bb86c7bad33aa4399ee2de35c339051ca9295ec91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79a5ac97f912d7dd037a289bb86c7bad33aa4399ee2de35c339051ca9295ec91
Size

63KB
MD5

36ee3a9f606d404c334dd6f107cd9920
SHA1

b08d04fc829205b93845f4402d9a8e4ca133f1bc
SHA256

79a5ac97f912d7dd037a289bb86c7bad33aa4399ee2de35c339051ca9295ec91
SHA512

241f773dcf1c345f80123b72bc8465032572cb40abcd917ec0a4ce8b5606b693dae7f1a0739c84dddbd9290fd408556c5b86ebb0c237ad1603bf0d4d222ac857
SSDEEP

1536:+6ot7lwEJaX2nwJfDrbPrMjviCJmnHgCScwDaOmI1ZSKlOPCfhdQY0VFcn:+96EWcSPbPrMjKCUnHggwv1ZSKIp2

Score

N/A

Malware Config

Signatures

Files

79a5ac97f912d7dd037a289bb86c7bad33aa4399ee2de35c339051ca9295ec91
.exe windows x86

af0203f27ab9e862385838a86bf1ee07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetTempPathW
GetAtomNameA
WritePrivateProfileSectionA
GetVolumePathNamesForVolumeNameW
GetSystemTimeAdjustment
LZOpenFileA
EnumSystemLanguageGroupsA
AllocateUserPhysicalPages
SetVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE