796c77e5296d989cf163dfc3f0449d2b31342ce6ea7696dd5ddc73ccb8f20e21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

796c77e5296d989cf163dfc3f0449d2b31342ce6ea7696dd5ddc73ccb8f20e21
Size

56KB
MD5

95d8171c0208a36082ff0c27b62fbb78
SHA1

b8df2c0af48f2034b1795b872421d74999591d30
SHA256

796c77e5296d989cf163dfc3f0449d2b31342ce6ea7696dd5ddc73ccb8f20e21
SHA512

b35e34fd10851d0a57207a5fcb5eed7b05b000730c88734f22937a2be28009628fea48bb5e5f8a5ca7d0ae866951e1cdd5f874b85ab0fd8374f243c608584af4
SSDEEP

1536:hZ40ZUCsWCxN1lfl8S01v+57MhqdJ0xvDageuvu:N/sWCx5flH8v6MsdsvDa/uvu

Score

N/A

Malware Config

Signatures

Files

796c77e5296d989cf163dfc3f0449d2b31342ce6ea7696dd5ddc73ccb8f20e21
.exe windows x86

906c7ba29cb5ad91d22690fceb9d4250

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LZRead
SearchPathA
GetFileSizeEx
TermsrvAppInstallMode
OpenProcess
WriteConsoleInputW
GetProfileSectionW
SetTapeParameters
GetTempFileNameW
CreateMemoryResourceNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE