49d082331e498420045d1de5fe9a595582530953c606f364ad9af093cfcd294a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49d082331e498420045d1de5fe9a595582530953c606f364ad9af093cfcd294a
Size

63KB
MD5

204b54c9d8d9ed501654189c17aabe5c
SHA1

d8e29e5a790e443289435f4fa2acda4eb1082236
SHA256

49d082331e498420045d1de5fe9a595582530953c606f364ad9af093cfcd294a
SHA512

d550cef619b967798e1b6e21ba60707df9d035fdc4e6399c7c24326099abbab0821a114b976c9eae1b66afecf9a93f607dcc13c35422974a0ca8fbbd8b4dc89c
SSDEEP

1536:G482jvE1KNJMdnETUq9yRnSyVHtiYkTrqyAxXoE:G482jvEPlEIwsVNiYkFDE

Score

N/A

Malware Config

Signatures

Files

49d082331e498420045d1de5fe9a595582530953c606f364ad9af093cfcd294a
.exe windows x86

923e020c438e9e88d6356a727f7989b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EndUpdateResourceW
GetWindowsDirectoryW
SetMessageWaitingIndicator
GetConsoleCommandHistoryLengthA
FlushViewOfFile
DebugActiveProcessStop
IsValidLanguageGroup
LoadLibraryExW
WaitForMultipleObjectsEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE