2151ce28388a15f6d16b663e5f93fc66f4dcd3e85cfae2dc46f7277d3f1ad973 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2151ce28388a15f6d16b663e5f93fc66f4dcd3e85cfae2dc46f7277d3f1ad973
Size

501KB
MD5

4f70a6b16282d6242bd3863f1baa78f0
SHA1

c80ea2522fb0334e84c37e0065b5dd43a7f76af9
SHA256

2151ce28388a15f6d16b663e5f93fc66f4dcd3e85cfae2dc46f7277d3f1ad973
SHA512

ee8e3c28e97882a6eddfd90e7aae22053f6ce3b1172fe6b7cce51eec20b0c13a4ef1dd46eb5b15a07c62dbaed26f7f8ce49a47a20f2d0a15eb66568d1aced3c5
SSDEEP

6144:bwf1vCPXDS2t/wguJpVopIM/eiG3cE9bAxsfW7qz1jC84PXJcKK8dz5CnezFOHP7:buvCPXmFjJ7oaz33O6euNC8+Zwp5k6

Score

N/A

Malware Config

Signatures

Files

2151ce28388a15f6d16b663e5f93fc66f4dcd3e85cfae2dc46f7277d3f1ad973
.exe windows x86

71ff47caf4e1d6e590e3938772dced21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
GetOverlappedResult
WaitNamedPipeA
Module32NextW
EnumResourceNamesW
QueryPerformanceFrequency
GetNamedPipeHandleStateW
SetConsoleMode
DeleteTimerQueue
SetCommState
VDMConsoleOperation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE