3ba2649ea9a4e3e215f5e63cf5640fadc4c9bd71bf08407299bfa96918fe7ee9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ba2649ea9a4e3e215f5e63cf5640fadc4c9bd71bf08407299bfa96918fe7ee9
Size

56KB
MD5

656bcd0b6bde9e4225c83bc6f7f161c0
SHA1

4d7363eff879f5984e8ba4a7067682b655d82ae1
SHA256

3ba2649ea9a4e3e215f5e63cf5640fadc4c9bd71bf08407299bfa96918fe7ee9
SHA512

5465c4331678afd3d433d922176c63e91bcacdcad681aa0be3db61a45692a00eb12558bd2888eade2034f8478215f374e101078ca3b4d0f392bced29e52e51db
SSDEEP

1536:UVHciNtk8dFBFLWbjzQeT/sQv+kUCPCdKnV7uqzs93P:cNNt5BxWbRT/tJL1V7uqzk3P

Score

N/A

Malware Config

Signatures

Files

3ba2649ea9a4e3e215f5e63cf5640fadc4c9bd71bf08407299bfa96918fe7ee9
.exe windows x86

f2b7e311dc620215356552ffefd93bf5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConsoleMenuControl
DefineDosDeviceA
PrivCopyFileExW
ReadProcessMemory
SetThreadPriority
WaitCommEvent
TerminateProcess
SetConsoleCtrlHandler
IsBadCodePtr
SleepEx
ConvertThreadToFiber

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE