32df901fbf733355c1cf7ba545d124bd429c84374605b96dc82ee92bfb3ee04d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32df901fbf733355c1cf7ba545d124bd429c84374605b96dc82ee92bfb3ee04d
Size

63KB
MD5

6589272424ef03549c370b2d16851d20
SHA1

e9d370acdc7654c19dc693d97fe509ac00e640b6
SHA256

32df901fbf733355c1cf7ba545d124bd429c84374605b96dc82ee92bfb3ee04d
SHA512

cf38c2b637e56fa09f2a93f12988d154c6d49b063c21dfd2c449f6281377375a383fff8feb765558e933f74d8c61bc27dba1375c8085e4ce65b4f0ef75331464
SSDEEP

1536:znIDje84OU1zlf+WydyGPq0KFLsMqln8n7Oc6gKQjRFQTc2m:znIu856zlfuT9sLsQnaGKM6E

Score

N/A

Malware Config

Signatures

Files

32df901fbf733355c1cf7ba545d124bd429c84374605b96dc82ee92bfb3ee04d
.exe windows x86

63d86f41c42d227382e6d5f69ef67a2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
NlsConvertIntegerToString
CreateProcessA
GetConsoleCharType
OpenFile
RegisterConsoleVDM
LockResource
HeapUnlock
ReadConsoleW
IsProcessorFeaturePresent
GetPrivateProfileStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE