ff23b78c04aeda406382e6beec4e0264eaf3c4e530aa9efd85822bc8daa6d0df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff23b78c04aeda406382e6beec4e0264eaf3c4e530aa9efd85822bc8daa6d0df
Size

20KB
MD5

bafb4f8c95f4d9402b3b1516c62301cf
SHA1

22a5f6e59682dad1dac90ff495c3652b3c88b9c7
SHA256

ff23b78c04aeda406382e6beec4e0264eaf3c4e530aa9efd85822bc8daa6d0df
SHA512

c1cc25c8db44403436631ff82d5d7b43f5c60b7edcc85d9ff2b1f36fe321f8e94006a71d6f9f09b952c9e97256a5a06b5823e4b4a77e6188a133e6559e938850
SSDEEP

384:oJQA+UbLn6dHISIlloybKOb27KKztLhHGlu875OOLbT:epbecl1bVKztlHIb

Score

N/A

Malware Config

Signatures

Files

ff23b78c04aeda406382e6beec4e0264eaf3c4e530aa9efd85822bc8daa6d0df
.exe windows x86

37520f1715ce8c2dc5f35b181cdd20fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
HeapFree
MultiByteToWideChar
WideCharToMultiByte
lstrcmpA
GetFileSize
lstrcpyA
GetExitCodeProcess
SetNamedPipeHandleState
DuplicateHandle
CreatePipe
lstrlenW
GetLocaleInfoA
QueryPerformanceFrequency
GetSystemInfo
GlobalMemoryStatusEx
ReleaseMutex
WaitForSingleObject
TerminateThread
GetCurrentProcessId
GetCurrentProcess
LoadLibraryA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE