f486972f3790075ab867591f53445e50e34f761bc31b1aa9c6af960bc046f549 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f486972f3790075ab867591f53445e50e34f761bc31b1aa9c6af960bc046f549
Size

5.0MB
MD5

05d982adcd12de47cef397253eb3e451
SHA1

0aed8054209dea70d091ba8fac2d4e6e82068164
SHA256

f486972f3790075ab867591f53445e50e34f761bc31b1aa9c6af960bc046f549
SHA512

9209adc490603e5a91ea38190cbd8c0721eb9775167c873ccc6f6edd4b18c51476b585cf3ccfa44801a30bf5c8d13ca567e1a189a2b14097d91ae0bc555d4063
SSDEEP

768:WunseLqfAqXYWHrtS1fnlhmWfPwLPF0aVIpqwji++ia:hAKGymCuNZVazjd+r

Score

N/A

Malware Config

Signatures

Files

f486972f3790075ab867591f53445e50e34f761bc31b1aa9c6af960bc046f549
.dll windows x86

24f6c2b8543803786e50f83c854479fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

__dllonexit

Exports

Exports

pbshequr4

Sections

.data
Size: 25KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE