49f603c552d2e27936777b769299359c44f9363be45a81f1ef2b2b536e5781ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49f603c552d2e27936777b769299359c44f9363be45a81f1ef2b2b536e5781ff
Size

63KB
MD5

013a8eb97858b6a92544720193b72e7c
SHA1

7716be0cde3d2dd5f8463ca88b97ead9cefc08d8
SHA256

49f603c552d2e27936777b769299359c44f9363be45a81f1ef2b2b536e5781ff
SHA512

7895c941aeeb5c192f0ab385ef7ccdca96ed02f73b56b48807bdf96cd98a8974539e8cfb0066bced57902c937b49f798c01c7c4a965c011bb390af1913050f0b
SSDEEP

1536:SnmgTfkYgBLpTtfRD5MOCfKt/4ng3dHpfmcZMOlq1C9HHZyfI:vgjkrRxcWVV9yxAHZ0I

Score

N/A

Malware Config

Signatures

Files

49f603c552d2e27936777b769299359c44f9363be45a81f1ef2b2b536e5781ff
.exe windows x86

885ae33bfbc25f8b7cda9067e45b2b85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextChangeNotification
HeapLock
WriteProfileStringA
ReadConsoleInputW
SetNamedPipeHandleState
MoveFileExW
GetVersionExA
CreateHardLinkW
GetFileTime
WriteConsoleOutputCharacterA
GetSystemPowerStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE