d041ef98b76a16910eb0cf0bf51ddda2b0711fb7021ce85ec98c2eca409134f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d041ef98b76a16910eb0cf0bf51ddda2b0711fb7021ce85ec98c2eca409134f5
Size

76KB
MD5

20f2cdc24a15fc7ab113f53d5dcdccd4
SHA1

5168aa19b445922e3cb79d641f83b2cb28a663c0
SHA256

d041ef98b76a16910eb0cf0bf51ddda2b0711fb7021ce85ec98c2eca409134f5
SHA512

589ff2c1229fc5756c004c497d3752c46fa30d0630c99d7bc4ffb0381234de2280a47b96919f9fd3166c3b58225996a682a563a5ec405c34e36a1aba30a57049
SSDEEP

1536:LqxmgmbYPeIwt0Sj5eGLUShXhBbX+ENL5+ASaFpShg82hW8fPL9:LqxhmbYPPIrhXjT+ENL5+N9g8vYL9

Score

N/A

Malware Config

Signatures

Files

d041ef98b76a16910eb0cf0bf51ddda2b0711fb7021ce85ec98c2eca409134f5
.exe windows x86

b74bd56279956c22ab7dfb9c3a9a14a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCommandHistoryMode
RtlMoveMemory
EnumResourceLanguagesW
ExitProcess
GetPrivateProfileSectionNamesA
GetProfileSectionA
lstrcatA
ConvertFiberToThread
ExpandEnvironmentStringsW
MultiByteToWideChar

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE