19ebc37ee4908d0e049800482c27370adb80a57dae9cd2a034b0907a4862ddcd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19ebc37ee4908d0e049800482c27370adb80a57dae9cd2a034b0907a4862ddcd
Size

83KB
MD5

61eda5464b59b51bc54f6ae0b9055dfd
SHA1

1242b16d1bec8923ecf1341c99fb863bec7f9c61
SHA256

19ebc37ee4908d0e049800482c27370adb80a57dae9cd2a034b0907a4862ddcd
SHA512

c5bbd717e66285d61af5b0687d0002867e99fe0ddbc9b21c61923ff6e03ac399b78517702dbf23c3db92b21e9a9ddb7b14e5e91affb4adf817c7f9d62d0c40ff
SSDEEP

1536:Ftm876Z9XAtmf2YO1AJDTxty9FIt4Y6NUx5koGrH2q7qDDlW4gv1+zpjVrs2ryrW:FQ8WZJoBe1tBt4Y4ULkZWEeDmvQzHs2i

Score

N/A

Malware Config

Signatures

Files

19ebc37ee4908d0e049800482c27370adb80a57dae9cd2a034b0907a4862ddcd
.exe windows x86

a9f9a8ac14bc7c65b6ee09daebb37f04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalDeleteAtom
GetNumaAvailableMemory
SearchPathW
AssignProcessToJobObject
FreeConsole
CreateFileA
FindNextVolumeMountPointW
GetProcessAffinityMask
VerLanguageNameW
GlobalAddAtomA
DeleteFiber

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE