76b82b28c5091a227940b0553d354154b8257911eab702bfd5566e24b05ab685 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76b82b28c5091a227940b0553d354154b8257911eab702bfd5566e24b05ab685
Size

76KB
MD5

7056e450a3d5f5cff5c6356cb9e5a150
SHA1

3b90424beb145363171b4d8d31f73a33f498b2e5
SHA256

76b82b28c5091a227940b0553d354154b8257911eab702bfd5566e24b05ab685
SHA512

f8ba4f7f9ae88e08989272a064391e2b3ba90674c7a8c7f860d011249700cec1ba966594624d39a0dd60b6bc877c0cf6508538de266bf1e284635908509a2546
SSDEEP

1536:f0YNQtS5zmp//C+koImJgfDT8SvkDJf2yGeyxHdwoqxwYHkzFMG4KR:ffNQtSY/C+krmSn/8FGNdqx6zFMGl

Score

N/A

Malware Config

Signatures

Files

76b82b28c5091a227940b0553d354154b8257911eab702bfd5566e24b05ab685
.exe windows x86

035536b3248ba33c51b99c629bc41722

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommModemStatus
IsBadReadPtr
InterlockedCompareExchange64
SetConsoleNumberOfCommandsA
SetConsoleCursor
VirtualLock
GetVolumePathNamesForVolumeNameA
lstrcatW
MapViewOfFile
WriteConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 61KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE