de95953e44276edd2c8602f834678856d4745120fa9a13f4e5eb79df0308397e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de95953e44276edd2c8602f834678856d4745120fa9a13f4e5eb79df0308397e
Size

91KB
MD5

63e48adad9f23921c788ca178209fb01
SHA1

c09c3002850cfc3562cc8082484ba63be2addbaf
SHA256

de95953e44276edd2c8602f834678856d4745120fa9a13f4e5eb79df0308397e
SHA512

73c00664a397a01d4820b97a74b81d16092f1c79a11329e0746a6283243b8031fbf23260f78656606c915e9a1042bec35f371c62cbe3571c69dca9e9990c8863
SSDEEP

1536:hG5nAgiTaARNKAJfYy1Z8UYumcTwZXx4ZGmvShqVhq9BBmvjr8WxNFrNgFf1:4OTaAeAJl0HEruqVhFBNFst

Score

N/A

Malware Config

Signatures

Files

de95953e44276edd2c8602f834678856d4745120fa9a13f4e5eb79df0308397e
.exe windows x86

1b8f74aa7b345cbfb64d33117b37d7ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
ShowConsoleCursor
ReadConsoleOutputAttribute
CreateFiber
VirtualProtectEx
GetCommTimeouts
SetDefaultCommConfigA
GetProfileSectionW
ProcessIdToSessionId
CopyFileExW
UnlockFileEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE