496eae41b892fc3e600d0962ae7748e0f5e8e1fffe0f11b0f4529e1e4a077e36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

496eae41b892fc3e600d0962ae7748e0f5e8e1fffe0f11b0f4529e1e4a077e36
Size

56KB
MD5

2a76e2de71e654177287c3b27e6c3ca0
SHA1

3df2527a99b5517d47799930c3c52e133a3e130f
SHA256

496eae41b892fc3e600d0962ae7748e0f5e8e1fffe0f11b0f4529e1e4a077e36
SHA512

e17badf9a54d3336212d37bb7a3c6ab18b0caa773477cf673b02ec655e75a4fefe4300d166d061e4fb3f83d3dfb49b8264a995f980303ed8c9ab1a657ca217db
SSDEEP

1536:QOHyYNghr9rTBvgUL3cD5p5gkS1fKFSC6mf5i0b/gkvqkqWpItdbUb:QlDL3yfgkufYSM5Fb/gkvad

Score

N/A

Malware Config

Signatures

Files

496eae41b892fc3e600d0962ae7748e0f5e8e1fffe0f11b0f4529e1e4a077e36
.exe windows x86

1fe3cfaaa13644128659cb2629b3f449

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetExitCodeProcess
SetLastError
GetBinaryTypeA
GetLogicalDrives
lstrcmpiA
GetPrivateProfileStringA
lstrcmpiA
lstrcmpiA
CreateWaitableTimerW
GetModuleHandleA
GetTickCount
GetLocalTime
lstrcatW
IsValidCodePage
GetDriveTypeA
GetStdHandle
FileTimeToLocalFileTime
CreateNamedPipeA
lstrcmpiA
HeapCreate
EndUpdateResourceA
TlsFree

ntmarta

AccConvertAccessToSD
EventGuidToName
EventNameFree
AccFreeIndexArray

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ