0f1fda88977ad870a267f85cd7ba68af4b76384dbc0da64157626096b0158254 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f1fda88977ad870a267f85cd7ba68af4b76384dbc0da64157626096b0158254
Size

94KB
MD5

c84211112c143a83f7ea38db94aa6098
SHA1

ec6c3de2d44d4ad713d42cfe52b73712ac7ba851
SHA256

0f1fda88977ad870a267f85cd7ba68af4b76384dbc0da64157626096b0158254
SHA512

9fee52a73b51ea9c1f4853a4f68c264ca09a8ea055b3ddc1fecf37e29beaf4a6d0cdeec100328bb59e5957118b1d8d28a35670152bcb2f71cb59bb90aa40a9fe
SSDEEP

1536:YwASRk/79dRvMKY6MXV24TTqMGGbDTrE22liVpdc8YaEJwZK4/83ZoMOALF6SSf:A1pMXxQ4TTqMxalEpdhZEXtpxLF6H

Score

N/A

Malware Config

Signatures

Files

0f1fda88977ad870a267f85cd7ba68af4b76384dbc0da64157626096b0158254
.exe windows x86

4dc96abc9bec97ab9203aa35d3f67dd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReplaceFileA
FindFirstChangeNotificationW
GetThreadLocale
ExpungeConsoleCommandHistoryA
WriteFile
_lcreat
GetProfileIntW
FileTimeToLocalFileTime
WaitForDebugEvent
RemoveLocalAlternateComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE