fcb17157d2ac4abbce270880f93b308a1722c5ca9c3c0017c6310e8f7e6fab92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcb17157d2ac4abbce270880f93b308a1722c5ca9c3c0017c6310e8f7e6fab92
Size

275KB
MD5

42d527b4337bf8ae3dd658f747bd0f3e
SHA1

f908011c5d2d95fed3480e34c6af5d34f4db616c
SHA256

fcb17157d2ac4abbce270880f93b308a1722c5ca9c3c0017c6310e8f7e6fab92
SHA512

b4f1ffe78dc2cf7132a790ecd274034ee5ad03fc9e2e2415896e375a5e33e5e22bfb56e43eca026db82e1186bd42ad8500a730ed273788f8cb24b4c8cc6780ef
SSDEEP

6144:GyJT0BdH/wguJpVopIM/eiG3cE9bAxsfW7q8:Gy9ESjJ7oaz33O6eP

Score

N/A

Malware Config

Signatures

Files

fcb17157d2ac4abbce270880f93b308a1722c5ca9c3c0017c6310e8f7e6fab92
.exe windows x86

fa971d45702999f43c3afa6dc8c52052

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomW
FlushViewOfFile
FindFirstVolumeMountPointW
GetVolumePathNameA
LocalFree
ReplaceFileW
CreateProcessInternalWSecure
HeapReAlloc
GetProcessAffinityMask
WaitNamedPipeW
SetConsoleInputExeNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE