d830db7b48d2b68cc2fe674969c45060dd52b291bdd31c5a8ad698042d0bd5c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d830db7b48d2b68cc2fe674969c45060dd52b291bdd31c5a8ad698042d0bd5c9
Size

63KB
MD5

2c08e46442255765dd4ef7152eb1b0f0
SHA1

028b899c4ba935e2fd7e5900abc5e7e72d0bcace
SHA256

d830db7b48d2b68cc2fe674969c45060dd52b291bdd31c5a8ad698042d0bd5c9
SHA512

175dd270e3f597e479693f956e977978af5bc1049139f50356e8ce44c7c3a55ce24af49ca6fc790d51113fa5ea1ef5d992061a675b0316b6850a9e4556a68512
SSDEEP

1536:jJ/9e/4G025qk9IPSK4i11PwhYAxkD3H/+iG:v64Yu1PweAxC+B

Score

N/A

Malware Config

Signatures

Files

d830db7b48d2b68cc2fe674969c45060dd52b291bdd31c5a8ad698042d0bd5c9
.exe windows x86

7f0d5ffc9d925a3518e3f6e3bd6efdae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesA
RaiseException
LZInit
SetFilePointerEx
CreateHardLinkW
RaiseException
EnumResourceTypesW
DeleteFileA
LocalLock
SetVolumeMountPointW
ZombifyActCtx
InterlockedPopEntrySList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE