c13d7474b5e1249438707aa65ecc3fa9c1f95a2523144d3c7abae64f80e8713a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c13d7474b5e1249438707aa65ecc3fa9c1f95a2523144d3c7abae64f80e8713a
Size

91KB
MD5

65147eaadcde328d05e938d0089bef60
SHA1

ae5a41566cc3525210953f54fbd5ed2cb96ddca4
SHA256

c13d7474b5e1249438707aa65ecc3fa9c1f95a2523144d3c7abae64f80e8713a
SHA512

e34225eed12b471ec10c197801e1594934235135a15da7a0392e57f2501e9f2b8e7d85623cbf813e7c99778c9b9ff823aa1f3876d0ab33ade34a278be2ceb91e
SSDEEP

1536:10ipcakfc7rNHk6eSR25n0YE8HlS7S5oNX+gAz9KVudrE1OhUVTDK8:q/cgSI568H6uUUNhUU8

Score

N/A

Malware Config

Signatures

Files

c13d7474b5e1249438707aa65ecc3fa9c1f95a2523144d3c7abae64f80e8713a
.exe windows x86

25eb37246a0dc4045d326c33b29b61e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesLengthW
RtlFillMemory
GetConsoleCP
FindFirstChangeNotificationA
HeapExtend
CloseProfileUserMapping
SetConsoleCP
ReadFile
lstrcmpA
GetConsoleAliasW
CreatePipe
ReadDirectoryChangesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE