c0fbdda78afbe3981b8091d9668981f0958d6f6fe2b567af3d55d834801a7ca8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0fbdda78afbe3981b8091d9668981f0958d6f6fe2b567af3d55d834801a7ca8
Size

56KB
MD5

6aadd56024ec79e4ecdfe7674099dac6
SHA1

42b88c3efa64fbdcdf9287001f7659071975316a
SHA256

c0fbdda78afbe3981b8091d9668981f0958d6f6fe2b567af3d55d834801a7ca8
SHA512

5a0ff77ea09adeb6ca6885fcff740dac40e1b8ac3e5e3ce9bdfd1a7d9682fb8ce1458125ae0f2d7dbdd88d39373dbf8ff026aaf69f98f2296e44d79b7a8683b9
SSDEEP

1536:Tk1RXjto9jnrBJBPaCEsK4vavHKmQqhHtRvS:IHX2z/PlEslMqmQqrR6

Score

N/A

Malware Config

Signatures

Files

c0fbdda78afbe3981b8091d9668981f0958d6f6fe2b567af3d55d834801a7ca8
.exe windows x86

62c987f74d01afe1301632c57b904daf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
UnlockFileEx
SetProcessPriorityBoost
ReadFile
HeapUsage
lstrcmp
InterlockedExchange
CreateFileMappingW
LocalAlloc
HeapCompact
ReadConsoleOutputCharacterA
IsBadCodePtr

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE