4693115ed5ad420d81af52ca56a5f20180e928ebfbedfe2d1cd86079dad5a9fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4693115ed5ad420d81af52ca56a5f20180e928ebfbedfe2d1cd86079dad5a9fe
Size

820KB
MD5

4eda21d13537167004b997372ebcdb5a
SHA1

3d1d08fe2ee3dd4d6531cbc07253fb25c409e392
SHA256

4693115ed5ad420d81af52ca56a5f20180e928ebfbedfe2d1cd86079dad5a9fe
SHA512

bb8f3f2668cf1be41bac6cc0749211c44efa8c4297140be5dd635487fbf1a3ef02b3aee4500f15a85659839209deec2dcb096ba4bb0cecd36c15d706d10f8d8f
SSDEEP

24576:Z3Pmz4cb7e6byDz8fwE/4Vf4EVNBOQAyr13:Zfmz4c2cDwEA54EhtAK

Score

N/A

Malware Config

Signatures

Files

4693115ed5ad420d81af52ca56a5f20180e928ebfbedfe2d1cd86079dad5a9fe
.exe windows x86

83b4cca35efce10a595699d7369e921d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateEventW
lstrlenA
VirtualFree
GetModuleFileNameW
VirtualProtectEx
TlsGetValue
WriteConsoleA
SetCurrentDirectoryW
TlsFree
GetCommandLineA
GetStringTypeW
FormatMessageA
SetThreadPriority
GetFullPathNameW
lstrcpynW
GetModuleHandleA
GetPrivateProfileIntA
GetCurrentThreadId
DeleteFileW

wmadmoe

DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.ndata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ