24a68489a4df0e3ecabdbf10d9a59f1dafacf23c5450f157a3c1400a25acc97c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24a68489a4df0e3ecabdbf10d9a59f1dafacf23c5450f157a3c1400a25acc97c
Size

234KB
MD5

52829b4c8c6432c4ad2ba4ab76e146cb
SHA1

403e3de2ab192608975bbef7597e1759be5c9206
SHA256

24a68489a4df0e3ecabdbf10d9a59f1dafacf23c5450f157a3c1400a25acc97c
SHA512

e53ce3b5f6364e510bda8744eae8ab8c42bca7b0fb08bafaffb977d7f4b9aba8985db977debea658de886cca6e09c013ae7a924c248ec9cf051950cda57b8a94
SSDEEP

3072:FGLY45XEM6tmmi0NJytxgbE6Wli3CyLLYgzFjOt3DdWH8n3T6GBNBYlZUL8oQa5h:hDrtRiw0tybE1cCyggzo3U8j9/CZOVXh

Score

N/A

Malware Config

Signatures

Files

24a68489a4df0e3ecabdbf10d9a59f1dafacf23c5450f157a3c1400a25acc97c
.exe windows x86

d60f401320db1a04eba30c9c71080d63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberFormatA
GetLastError
FreeConsole
SetLocaleInfoA
UnregisterWait
GetDevicePowerState
InterlockedCompareExchange

msvcrt

memset
memcpy
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qwsx
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ