65a6e0961e1ea76ee28574963d530fbab25823563f2e638d8f9fed48d73b95a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65a6e0961e1ea76ee28574963d530fbab25823563f2e638d8f9fed48d73b95a0
Size

990KB
MD5

7092d1dd29f9b20f56e50721a1889190
SHA1

c140b0744e940b055521ea874147d14c3ace7cea
SHA256

65a6e0961e1ea76ee28574963d530fbab25823563f2e638d8f9fed48d73b95a0
SHA512

13822e52b45f3bd90f2077fce028cc469b214d0bb8a83e15b7018c9b9b4dc1a9bfbc044d117457e32e6f68460ce65db30aeb27b97e64736856fa28b77fbe85ca
SSDEEP

24576:NoRQp7Yn+VMNDyTBl9ugSvGChK8EPbhy:NoRQp7Y+VMN+TBCgS+C

Score

N/A

Malware Config

Signatures

Files

65a6e0961e1ea76ee28574963d530fbab25823563f2e638d8f9fed48d73b95a0
.exe windows x86

35d0429529d97dc818d0fc5a83e9ef37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtMapUserPhysicalPagesScatter

kernel32

MapUserPhysicalPages
CloseHandle
GetSystemDefaultLangID
SetSystemPowerState
GetCurrentProcessId
GetConsoleWindow

Sections

.text
Size: 987KB - Virtual size: 988KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE