440ca8bd5a83ba9252d8b6d75f5ba15f1aac78f19e7b8eea2ee6744e18b208a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

440ca8bd5a83ba9252d8b6d75f5ba15f1aac78f19e7b8eea2ee6744e18b208a7
Size

63KB
MD5

72621511ec5039b6f94d06ca4a468770
SHA1

6360167117d7fdd07d857f0d76462ae69dfe465f
SHA256

440ca8bd5a83ba9252d8b6d75f5ba15f1aac78f19e7b8eea2ee6744e18b208a7
SHA512

c12a80c74358094e41de3794ae3d129b3ba21de82f74be592821bf7ce4375bc3794787c4227ecf969c9d7e2b707c63632a09183e2051a74694c043367e383e44
SSDEEP

1536:bGZIAk8h/XKK+wmeCzSRHLvMW8vb/1V+oNBDqKd:aJhn+w4zig/1jXl

Score

N/A

Malware Config

Signatures

Files

440ca8bd5a83ba9252d8b6d75f5ba15f1aac78f19e7b8eea2ee6744e18b208a7
.exe windows x86

b9afa9a522b9e9020eefa147e90ae73f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InvalidateConsoleDIBits
GetConsoleCommandHistoryLengthA
NlsResetProcessLocale
IsValidLocale
lstrcmpiW
IsDebuggerPresent
IsBadStringPtrA
InvalidateConsoleDIBits
MapViewOfFile
SetConsoleInputExeNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE