49a6b49289c82e5f4f095c006bef68d0be32be315f2c67a3ed653817d1de2b2f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49a6b49289c82e5f4f095c006bef68d0be32be315f2c67a3ed653817d1de2b2f
Size

63KB
MD5

41c993c4233642b473b2e515c8025ada
SHA1

8fc60094745b2cb0ec17ceb0d223fa3780904962
SHA256

49a6b49289c82e5f4f095c006bef68d0be32be315f2c67a3ed653817d1de2b2f
SHA512

2a64d72098e97b001f7f1d5f98123ecf88a0b0064dbaa322a7d59256a417a2c99fce3057be519da0c409289e363be1b88af5be6d461e77bcefc78d7464772bb1
SSDEEP

1536:3H+bjeuiQgbx3sfIV4NJMJ4Bkblz8OqCen/X4WhS:3CiBbx8fIkJqckmOqlXpw

Score

N/A

Malware Config

Signatures

Files

49a6b49289c82e5f4f095c006bef68d0be32be315f2c67a3ed653817d1de2b2f
.exe windows x86

0e2609c4a19ed166686ffdf03c29ed7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EndUpdateResourceW
IsDebuggerPresent
CreateMemoryResourceNotification
EnumSystemLocalesW
GetCPInfoExA
GlobalLock
GetDiskFreeSpaceA
IsWow64Process
CreateEventW
RegisterWowExec
RemoveLocalAlternateComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE