2fe7936b99fa0e6ce0d0f08e27fe1cb61de7baab0539baff77569d7b64807f02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fe7936b99fa0e6ce0d0f08e27fe1cb61de7baab0539baff77569d7b64807f02
Size

67KB
MD5

494296ed376c8b51b8cf58a5a6d72505
SHA1

6061f90dca49f749db5ab57291b4c83bd6d7d83e
SHA256

2fe7936b99fa0e6ce0d0f08e27fe1cb61de7baab0539baff77569d7b64807f02
SHA512

f297da10488bff6a9e364be3b1eda2303ed6d020edd61f66139a500a7a1a3949d4d630e40dfa4b276eab7e03d3acc4b28881b2ac5a47c0931da7ccabcbef9478
SSDEEP

1536:wygF61bWOfefK8dHjGNOOb4pDNBzE0ETapNQ2O5yaSA:51C3xi0Ob4p5lFEapDa

Score

N/A

Malware Config

Signatures

Files

2fe7936b99fa0e6ce0d0f08e27fe1cb61de7baab0539baff77569d7b64807f02
.exe windows x86

ddaadf3c725955293de7283c48f61b9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FormatMessageA
GetPrivateProfileIntA
VirtualFree
GetStringTypeA
GetModuleHandleA
CreateEventW
GetLocaleInfoW
GetNumberFormatW
GetCurrentThread
lstrlenA
VirtualProtect
GetFullPathNameW
TlsGetValue
TlsFree
DeleteFileW
SetCurrentDirectoryW
lstrcpynA
GetModuleFileNameW
UnmapViewOfFile

wmadmod

DllRegisterServer
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow

Sections

.text
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE