b95dd646c358202981e387a3f9270c3ec7b0085dc00a38143fed97ee9c3e7aea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b95dd646c358202981e387a3f9270c3ec7b0085dc00a38143fed97ee9c3e7aea
Size

124KB
MD5

4a3d522e4f8596000c641a9fe1d602b8
SHA1

f5f8635670e09df678e22971fa576513f2f227f4
SHA256

b95dd646c358202981e387a3f9270c3ec7b0085dc00a38143fed97ee9c3e7aea
SHA512

4388c3d76e9d91bd52cbd9658d937ce3c123b778b9900147e041912339543ef65e05051077da337082375ab22f034d48a9421b95c97ef83d6fe5258b25de199a
SSDEEP

1536:8l14rQcWAkN7GAlqbkfAGQGV8aMbrNyrf1w+nnmneBsCXKaJeN4:wmZWXyaiedMbrN6pnnmeBsc

Score

N/A

Malware Config

Signatures

Files

b95dd646c358202981e387a3f9270c3ec7b0085dc00a38143fed97ee9c3e7aea
.exe windows x86

f4541d16b8376b58d3e6c39be16ee1d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextVolumeMountPointA

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE