d050fb01e972eb5936d72d96f5a73582d3c74e0b41f9489b3b45009e91bab6a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d050fb01e972eb5936d72d96f5a73582d3c74e0b41f9489b3b45009e91bab6a0
Size

87KB
MD5

27941f05fe6cc7e3db042c5103cd3210
SHA1

d4f211d9b7602a8db010d7a2fab628e54fdce0a9
SHA256

d050fb01e972eb5936d72d96f5a73582d3c74e0b41f9489b3b45009e91bab6a0
SHA512

eddd9616f9c70ea649e5082fbbc1e9da80746fa8a4e5c7a9f30576e095ad5d9314682105792c9dbc533b327c99b04a374eb7163a37f2cab889e1fd672051262f
SSDEEP

1536:+333wYaPeGKJ5YZXDwkpqNQtlb0okb1Nu0YYzCpBPpjVrs2ryrd1vUQuq5Eer/:+333SPeGc8MQtlgoCNRzCpBPHs2qj7/

Score

N/A

Malware Config

Signatures

Files

d050fb01e972eb5936d72d96f5a73582d3c74e0b41f9489b3b45009e91bab6a0
.exe windows x86

b17d56d715776410da0bddeb24e2e9f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThread
_hread
DeleteVolumeMountPointA
CreateDirectoryW
GetFullPathNameW
GetConsoleKeyboardLayoutNameW
InterlockedCompareExchange
GetConsoleAliasExesLengthA
FlushConsoleInputBuffer
EnumDateFormatsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE