42b80f3ffad2e2f04b9edf8d00990c63a2fe3f26dbe4b44694d6544cb7c0ca5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42b80f3ffad2e2f04b9edf8d00990c63a2fe3f26dbe4b44694d6544cb7c0ca5f
Size

94KB
MD5

6321217e7d2c4e5056f2237b0c5d0e79
SHA1

5e24c08b10fee101d06db613ecc31e7c91150423
SHA256

42b80f3ffad2e2f04b9edf8d00990c63a2fe3f26dbe4b44694d6544cb7c0ca5f
SHA512

16e400f5bb822351bfed806a92707256386601bb1726e5844153620372fd3ae1aaf8e1f29d238c73a543bbae6e9690b7b200ee3d7eaeebeff0fe5a66d1f2e97d
SSDEEP

1536:yEzF3zWV3FsWKNAPtImtBCLYHXf7QSjuJVc4EFxVNrAa0Z+:y5tFsWtt3QSjSfGyZ

Score

N/A

Malware Config

Signatures

Files

42b80f3ffad2e2f04b9edf8d00990c63a2fe3f26dbe4b44694d6544cb7c0ca5f
.exe windows x86

6d9e6cf8ad1bc4e8934d22e76b49eaac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsProcessInJob
OpenDataFile
GetConsoleCommandHistoryW
OpenWaitableTimerW
BeginUpdateResourceA
DeleteTimerQueueEx
LocalHandle
TransmitCommChar
CompareStringA
IsDebuggerPresent
SetVolumeLabelA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ani
Size: 37KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE