42b498c9fafa39cf8c07ae80ec03a0da123c28b04fda53de3bad9a1a53ca23dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42b498c9fafa39cf8c07ae80ec03a0da123c28b04fda53de3bad9a1a53ca23dc
Size

80KB
MD5

be0c09151d03cc97fa94ccfe2f8fe680
SHA1

fedc3103dfc681836730acbc17fe55cf538d2ed3
SHA256

42b498c9fafa39cf8c07ae80ec03a0da123c28b04fda53de3bad9a1a53ca23dc
SHA512

efba3e765d39c4059d55f28dcf6e970cd72add3154d38912b79cbcaf9253e925c9a0426c1f1579b3b4f13c02b8bb35959f87dbcf81b5fd527e7589bda87598ac
SSDEEP

1536:vfV0IW1f27niG1pntTGBp7tPNE0kb30PP82hW8fPL:nV0IW1OjiWntSBpBPNE0SkP8vYL

Score

N/A

Malware Config

Signatures

Files

42b498c9fafa39cf8c07ae80ec03a0da123c28b04fda53de3bad9a1a53ca23dc
.exe windows x86

03bb8d079a9fb740f181e1be44d8c24b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugActiveProcess
OpenFileMappingA
ExpandEnvironmentStringsA
OpenMutexA
ResetEvent
FindFirstFileExW
Module32NextW
IsProcessorFeaturePresent
IsProcessInJob
GetCurrentProcessId
GetNumaNodeProcessorMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE