05f4856ff8f321082079153a74e502f7d127d26a114464c67e22437b1acafa9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05f4856ff8f321082079153a74e502f7d127d26a114464c67e22437b1acafa9b
Size

80KB
MD5

4051adc771542e6db28dc6eeb56bf006
SHA1

961332f7c3e87cec62224990586218ee02e9e519
SHA256

05f4856ff8f321082079153a74e502f7d127d26a114464c67e22437b1acafa9b
SHA512

b7b60fb081e4e38080736a0afe5918208609a3e31543a0028e72f1933d766486b8d5d681695863cfb255b25741c9b82d931fa6fedcc8afea2aea2b2b98840e6e
SSDEEP

1536:8L+JkSlJvdCcKl9uKuLY/w2YpbD4lAjZp582hW8fPL:3PJEfIKNw2whjx8vYL

Score

N/A

Malware Config

Signatures

Files

05f4856ff8f321082079153a74e502f7d127d26a114464c67e22437b1acafa9b
.exe windows x86

f25a252abb203f129490bc12bcdbd343

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWaitForInputIdle
Process32NextW
IsBadReadPtr
EncodePointer
IsValidLocale
FormatMessageW
EraseTape
RegisterWaitForInputIdle
GetEnvironmentVariableW
PeekConsoleInputW
ResumeThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE