27be34bf4e2887f19b622d4c3c09b936c0e985874970651c34ed728a1b2fe5cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27be34bf4e2887f19b622d4c3c09b936c0e985874970651c34ed728a1b2fe5cb
Size

107KB
MD5

6a453997d1713eaf27e365cd9935e5c0
SHA1

f16ba06d32d2a240045d9da4e6facad103e97a0d
SHA256

27be34bf4e2887f19b622d4c3c09b936c0e985874970651c34ed728a1b2fe5cb
SHA512

e183e5239eb7204a63769d0c63eb129986349dc06ba3d11350b536959172a3ac3dfa8044a088e16c2e56f75f1fc6db0b8d159bcc584d7cfa5ee7bf299a27af2a
SSDEEP

3072:xVVVV/wGBWGyq0O4DCad7iOaHs2quGf9:OGBWGydOOA

Score

N/A

Malware Config

Signatures

Files

27be34bf4e2887f19b622d4c3c09b936c0e985874970651c34ed728a1b2fe5cb
.exe windows x86

30d31d65b7ab0f9c11806ee579af4bce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserGeoID
lstrcpyA
GetNumaAvailableMemoryNode
ValidateLCType
FindFirstFileExA
RtlCaptureContext
BaseUpdateAppcompatCache
LocalFlags
GetNumberFormatW
DuplicateConsoleHandle
lstrcatW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 51KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE