48a79e960da5aed9ccaa8c330905784bba17c483396937b01364195d3369490a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48a79e960da5aed9ccaa8c330905784bba17c483396937b01364195d3369490a
Size

111KB
MD5

51f6128003db5ecb3ded1e4fd7bdfbdf
SHA1

044d70c565b0e614cf83daac42955f9c386fb087
SHA256

48a79e960da5aed9ccaa8c330905784bba17c483396937b01364195d3369490a
SHA512

4acfe1edc16a0497f29c3e2ee5b0c96e321450f99ebb4b0d73023f6c03048d469840e6dc58b20a54e1f944d3281268b73d58e400fbfeec4893ad18dd21e6cc55
SSDEEP

3072:MGvx9VJEZbIQOB9B/wNRIjBkMqhGKZTbP:Mgx9VJUbIHxwEibZX

Score

N/A

Malware Config

Signatures

Files

48a79e960da5aed9ccaa8c330905784bba17c483396937b01364195d3369490a
.exe windows x86

08d8bff12bc1ae84c9e66c160fe33659

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThread
RtlCaptureContext
GetFileTime
FindResourceA
QueryDosDeviceW
GetConsoleFontInfo
BackupSeek
SetCommBreak
RestoreLastError
IsValidLanguageGroup
SetDefaultCommConfigA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE