11d9ac340bafb4939140c5b75352d60a4f789567f81beb5bb044cbcebb5e1bae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11d9ac340bafb4939140c5b75352d60a4f789567f81beb5bb044cbcebb5e1bae
Size

94KB
MD5

5dd341b464c3c4aadadbfe5388bdb9e0
SHA1

090e75cfdf97cab65ee9a762c0567a943aa90efa
SHA256

11d9ac340bafb4939140c5b75352d60a4f789567f81beb5bb044cbcebb5e1bae
SHA512

fa449952518845cd488fafbbf3508581755b21e78c8b6c338bdf640938afff7a8ed337b95d129bfc81825145e39ae99a6f573d9dc5a953c4615e3e74314dbe44
SSDEEP

1536:x6YCEaH7eFDcQOnJqUUYkUH7DYnsWqza32UHImws14E/JFc8YaEJwZK4/83ZoMOr:x6YCUFD7KlU3UH70nrqzHWTR14EvhZEY

Score

N/A

Malware Config

Signatures

Files

11d9ac340bafb4939140c5b75352d60a4f789567f81beb5bb044cbcebb5e1bae
.exe windows x86

2fd525ff3ca99320489454475acf02b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
lstrcpyA
SetConsoleOS2OemFormat
HeapWalk
SearchPathW
CopyFileExW
LocalLock
InvalidateConsoleDIBits
GetCurrentThread
GetProcessPriorityBoost
EscapeCommFunction
GetVolumeNameForVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE