fafd94df0d4b19613816bc47e533a45f9e29aafe786084fa6bbe2e7a555c5ccf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fafd94df0d4b19613816bc47e533a45f9e29aafe786084fa6bbe2e7a555c5ccf
Size

61KB
MD5

718538d2d9f33dac62dbb0c730da5b7e
SHA1

331d0257bd61e09ec4b8ec4a6754768d6f2efc7e
SHA256

fafd94df0d4b19613816bc47e533a45f9e29aafe786084fa6bbe2e7a555c5ccf
SHA512

7aede09331b8e01e0e2377a41153325733b4be3244a68f151743f98a269cbe01d5536cde92a400e2395ce39aea7b4051f7f28219ab847cd3f42532ad07d3525f
SSDEEP

1536:DIlMHhBbW9mUUjgh1i8j+Boog8CPY6GiEVzBWWCPIVCM:FaTGI1JjsZRSYCICM

Score

N/A

Malware Config

Signatures

Files

fafd94df0d4b19613816bc47e533a45f9e29aafe786084fa6bbe2e7a555c5ccf
.exe windows x86

25b265d87d063c269447b92a7832f99e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleW
WinExec
GetConsoleAliasExesW
PrivCopyFileExW
UnlockFileEx
VirtualProtectEx
Process32FirstW
GetOverlappedResult
SetTapeParameters
GetConsoleFontSize
ReadFile
SetLastConsoleEventActive

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE