f30cdfaa1abb0ee2d7ee0718faadebcd92d40701c2970d454e19d17630642d08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f30cdfaa1abb0ee2d7ee0718faadebcd92d40701c2970d454e19d17630642d08
Size

63KB
MD5

60c5efdbf6da4bc974b8ef7ede98a3f8
SHA1

26270f1424555e4c4bd2afcd812c024af0332188
SHA256

f30cdfaa1abb0ee2d7ee0718faadebcd92d40701c2970d454e19d17630642d08
SHA512

b23e62cf11fd338235405535c320b0b12d7b5758378ec807acc13ab039e9572d8bcc570c45085f54f4f8c13f0fc8b969bef4042d94f0401b25af1009bd3bb4f0
SSDEEP

1536:E0TSZZdvq64k+DqxkKE3w1D+KGT8BIA/j4JgBo:IZzvq1texX2KGT8BIqjkgBo

Score

N/A

Malware Config

Signatures

Files

f30cdfaa1abb0ee2d7ee0718faadebcd92d40701c2970d454e19d17630642d08
.exe windows x86

d4e4e198d1406803e780d75548b7f3d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursor
SetHandleInformation
EraseTape
IsBadHugeWritePtr
GetNumaProcessorNode
BeginUpdateResourceA
EnumerateLocalComputerNamesW
QueueUserWorkItem
RemoveLocalAlternateComputerNameA
BuildCommDCBW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE