04d9e6bf4c8e7f0154b80af0c859619dcbd9608a3c48153b86a4e28aa7661643 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04d9e6bf4c8e7f0154b80af0c859619dcbd9608a3c48153b86a4e28aa7661643
Size

67KB
MD5

7b48215d44b9566170ef15ea33325f89
SHA1

48d36687b319053b485e27f2cb4fa09fc654d944
SHA256

04d9e6bf4c8e7f0154b80af0c859619dcbd9608a3c48153b86a4e28aa7661643
SHA512

add3d6077a85170ccbead045dc857b16d55d7be3ea68b091c45b7f4db5732a54fb4b2d38766ed7aabf2210bb5fa1c8e330080b91f334d72d46f1c1750727cdae
SSDEEP

1536:6/Mn38lEIXSYgrMVXveA626qiDPQLzTZyCzYpl0Z9j2:Qc8lHSU/elqxLnZVYPa9S

Score

N/A

Malware Config

Signatures

Files

04d9e6bf4c8e7f0154b80af0c859619dcbd9608a3c48153b86a4e28aa7661643
.exe windows x86

f86fefd2c24abe0f01e391c64b4d9f84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleDisplayMode
DeleteTimerQueue
QueryDosDeviceA
ReadConsoleA
PostQueuedCompletionStatus
DeleteTimerQueueEx
GetModuleFileNameW
SystemTimeToTzSpecificLocalTime
GetProcessWorkingSetSize
GetDefaultSortkeySize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 53KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE