b58f3e50711736f6afb545b61223c3262a9ea916197a3caa8d9329f43b91deae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b58f3e50711736f6afb545b61223c3262a9ea916197a3caa8d9329f43b91deae
Size

76KB
MD5

34301211b12fc5e08f2d1ded0df3b923
SHA1

62f4d3ed832006e02e9ffa090e0b8319a9b97ef9
SHA256

b58f3e50711736f6afb545b61223c3262a9ea916197a3caa8d9329f43b91deae
SHA512

6977e508820ebac45c8624c5437d40966222e168438a0917d19ccafb9a292085744f9181c7a14821a51a54010fce9f495478b773abe13371d0bbb0c25de0aa33
SSDEEP

1536:BB2tsN5evL4KVM1z7mPv1t0ed5ryk/jEErxTWDTMqhGKYIZTET8x:BBIsNgjq1HmHL0edjBkMqhGKZTbx

Score

N/A

Malware Config

Signatures

Files

b58f3e50711736f6afb545b61223c3262a9ea916197a3caa8d9329f43b91deae
.exe windows x86

4e3808b38d79fcf5a890e70463118686

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
AddAtomA
DeleteTimerQueue
Sleep
InterlockedPushEntrySList
SetConsoleDisplayMode
AllocateUserPhysicalPages
_lopen
GetExpandedNameW
LocalUnlock
GetComputerNameW
GetConsoleAliasExesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE