13ee16e30aab4e8a69dde440b42bb4e473f92e58d333bc98c287370b4b644291 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13ee16e30aab4e8a69dde440b42bb4e473f92e58d333bc98c287370b4b644291
Size

76KB
MD5

8600167820be62ab75eeb412633b8ce8
SHA1

1db9ae698c700f1847c4d96631ca319e9a68a17a
SHA256

13ee16e30aab4e8a69dde440b42bb4e473f92e58d333bc98c287370b4b644291
SHA512

0d313624b3081daa209ef44448a9d6c3f6734b163dde0e9dea78e6029da44f6ed8db3173a6a3d561b740a08fcfc688a58711ddc37cdbfd3cb3cd8b1cfb968fe7
SSDEEP

1536:cNuhMB8MLGZ61jJsgeGrpOpopmAfh9eKYTSpjVrs2ryrd1vUQuq6:cNrm0GZ61jJfeGrphm8netuHs2qo

Score

N/A

Malware Config

Signatures

Files

13ee16e30aab4e8a69dde440b42bb4e473f92e58d333bc98c287370b4b644291
.exe windows x86

f0cfdf88f1c2e80667fcb74da5d48402

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupSeek
LoadLibraryExW
GetPrivateProfileSectionA
CreateNlsSecurityDescriptor
SetConsoleHardwareState
GetConsoleProcessList
GetLargestConsoleWindowSize
VirtualUnlock
DeleteAtom
GetConsoleProcessList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE