64d039a8c637ed831daad796f643887005ba34a30a6363fe1288d679869da23b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64d039a8c637ed831daad796f643887005ba34a30a6363fe1288d679869da23b
Size

66KB
MD5

16d73b6c7ccaf056ccd054a75c4fb670
SHA1

3d298312871b8bd8a3b301a284aaac90901ad043
SHA256

64d039a8c637ed831daad796f643887005ba34a30a6363fe1288d679869da23b
SHA512

cd1e9448818ea254f2acac8bd03de94a0e6f193e7cee9b0d179246f52b811d80885d9d4f011552e23f1c43082713e1211523f657f0090ce1453969d790e7b2ef
SSDEEP

1536:6Qdmzf1HDucFMBbnbj3RzkUJCC+Rg4/IhEpehjTS/5VsQNXY8:6QdmL1HDBMBbnbLRzkUyrppcju5/X1

Score

N/A

Malware Config

Signatures

Files

64d039a8c637ed831daad796f643887005ba34a30a6363fe1288d679869da23b
.exe windows x86

b9d46bfe4c72cd27fc47c2393ef9a360

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWindowsDirectoryW
GetPrivateProfileIntW
GetAtomNameA
EnumDateFormatsExA
RtlUnwind
ReleaseSemaphore
SetVolumeLabelW
AddAtomW
SetWaitableTimer
RtlZeroMemory
CreateJobObjectA
LocalSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE