11126ae7c5f26dff5b75b13cdd17dd466f94937404eb5d3d5fefce7c64204194 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11126ae7c5f26dff5b75b13cdd17dd466f94937404eb5d3d5fefce7c64204194
Size

178KB
MD5

4b5cb6a8ec31eea46a3db8a1b2d61c80
SHA1

551d02ce1df934c63ed886382eca0df73dc51c94
SHA256

11126ae7c5f26dff5b75b13cdd17dd466f94937404eb5d3d5fefce7c64204194
SHA512

03d8a5bf6a7ad6e68100be910b7eb7ce58e2415041a1be594e3e72ec7ccd44e1d57e73d3b2dea5e07e028b95de9de4541787cea6f550892959ab42e3e35a9c3f
SSDEEP

3072:7tlsUXx9N5pHs2qmRlixXaKa0qMW2pVol3IFEyKwL8/eV:7tlDfjh/wguJpVopIM/eV

Score

N/A

Malware Config

Signatures

Files

11126ae7c5f26dff5b75b13cdd17dd466f94937404eb5d3d5fefce7c64204194
.exe windows x86

c2f7158e898a880f038ed40069037b9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionGuid
ReadConsoleW
DeleteFileA
ReplaceFileA
EnumLanguageGroupLocalesW
BaseCleanupAppcompatCacheSupport
CreateProcessInternalW
PeekConsoleInputW
GetFullPathNameA
LocalCompact

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE