4ca7a015c51dca18d4ad73e659fe9bcf149f996950b10de6ef903bd06f9e5d52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ca7a015c51dca18d4ad73e659fe9bcf149f996950b10de6ef903bd06f9e5d52
Size

83KB
MD5

42eafa39866a6452eeb969b5bb0eda0d
SHA1

01bf439fdc151424662bda88e433a17d4609ace1
SHA256

4ca7a015c51dca18d4ad73e659fe9bcf149f996950b10de6ef903bd06f9e5d52
SHA512

23b30c600bf87a9c78e4a135d690ad772639f5dfa76d5571b946f25e143c9fb5892454ce89aeaa0d5b03707aaf7c485f1811c49c7878dd9600f37eba10acd9ea
SSDEEP

1536:fqoow+UBKSauiNTFRrHmh/6vwrQQdwhGV2OpjVrs2ryrd1vUQuq3L/:fWw+ETt4XtviQdhGV2OHs2qVD

Score

N/A

Malware Config

Signatures

Files

4ca7a015c51dca18d4ad73e659fe9bcf149f996950b10de6ef903bd06f9e5d52
.exe windows x86

cb038687cd3a5ab4d9bf807af6e53336

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryA
MapViewOfFileEx
BaseInitAppcompatCacheSupport
lstrcmpW
Toolhelp32ReadProcessMemory
CreateMutexA
RemoveLocalAlternateComputerNameA
InitializeSListHead
CheckNameLegalDOS8Dot3W

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE