de2579c25ea6f4a91f46aadbf942581f5d993ecea89b8e5f94d6a00c1ae0a5ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de2579c25ea6f4a91f46aadbf942581f5d993ecea89b8e5f94d6a00c1ae0a5ce
Size

61KB
MD5

6987fd4fe2a132df7a74cfced5733a36
SHA1

6cbc5f9573cc501490534268f17b25d8e3d0bae6
SHA256

de2579c25ea6f4a91f46aadbf942581f5d993ecea89b8e5f94d6a00c1ae0a5ce
SHA512

94dec668592ac2ff78ce77a5fb03cfef1a51709f0e5e00caba52f01118f4a8ecd896ac5d127094f437cbd58f7ac36725eaf89f24be27b84b69c13ccfded5ec3f
SSDEEP

1536:5yAVWI2ZCaweB4l3d30ZAh+43MmaQr+IOElB5DVIhhvLK:5yAl2YZOg0G5MArrl3DVWBLK

Score

N/A

Malware Config

Signatures

Files

de2579c25ea6f4a91f46aadbf942581f5d993ecea89b8e5f94d6a00c1ae0a5ce
.exe windows x86

59428115954e39fead227db0a7afd656

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrepareTape
GetFileSizeEx
GetExpandedNameW
BaseInitAppcompatCache
NlsResetProcessLocale
GetCurrentProcessId
ReadConsoleOutputAttribute
BindIoCompletionCallback
VirtualFreeEx
GetDriveTypeW
SetConsoleInputExeNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE