81b9143e53fde5d4ddc55ca4537212a7794653101d487d7d5f61d68d54dc20a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81b9143e53fde5d4ddc55ca4537212a7794653101d487d7d5f61d68d54dc20a6
Size

119KB
MD5

6b9b5e5e412bf1a1b5867427af981dd7
SHA1

c831e0b3d8171344e53d1a91c86e7a0dbb69664d
SHA256

81b9143e53fde5d4ddc55ca4537212a7794653101d487d7d5f61d68d54dc20a6
SHA512

d91bb564f413d5fd028688672370b10d0c0c054fc3ca3e3ed6ee36cb797c34d7b706f23bb85254586bf7472c6bdbbf087197f21f6a5ee8037a6ee3998e0535e6
SSDEEP

1536:18QHN2g9Leadw5IAIWeoEPKkkpKlABqOpjVrs2ryrd1vUQuqSSqK5tnCvv:32gUo7jMEupKGBHs2qxnC

Score

N/A

Malware Config

Signatures

Files

81b9143e53fde5d4ddc55ca4537212a7794653101d487d7d5f61d68d54dc20a6
.exe windows x86

2cc34ea9adbfa2a99f323bb37c7bcdf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapValidate
SetCommMask
EnumUILanguagesW
EscapeCommFunction
GetProcessHeaps
LoadLibraryExW
WritePrivateProfileStructA
ReadConsoleInputExA
SetSystemTimeAdjustment
InterlockedIncrement
GetEnvironmentVariableW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE