70b609815b41834960ca53a874eadf3ea711c8e9e3af62283c8b145a3668490f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70b609815b41834960ca53a874eadf3ea711c8e9e3af62283c8b145a3668490f
Size

76KB
MD5

0388d338ce15a9ce0a5c048d41f1023e
SHA1

38f8d22c58ea82f0151fc9a7ea1a9364394c0138
SHA256

70b609815b41834960ca53a874eadf3ea711c8e9e3af62283c8b145a3668490f
SHA512

3132c7cbe97ce9b36dc408caaed8a0ace74b33756e9d0465154f2419779658f8735d3efe6d160b55f8eddb3329ae2e70d7189db121103b09ce9738e68e45d942
SSDEEP

1536:i4FFFFFCH0Dcy9Ln5Z8/zkLEagVCQD0gWOlL7yw1AB7+8qvoWCuZ1NrRcN0i+jV+:/FFFFXeuxb0MmGU6w67Hs2qo

Score

N/A

Malware Config

Signatures

Files

70b609815b41834960ca53a874eadf3ea711c8e9e3af62283c8b145a3668490f
.exe windows x86

595328da1774c766091d7e1cb29dfdc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidCodePage
SuspendThread
CloseHandle
CreateMutexW
FoldStringA
RtlCaptureContext
lstrcatW
IsBadCodePtr
GetCPFileNameFromRegistry
WaitCommEvent
CreateEventA
GetCommConfig
EnumResourceLanguagesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE