839869bb0a25b37c7b2abe8abec8efce9e44c2fbf30dac331e4f131c965a1504 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

839869bb0a25b37c7b2abe8abec8efce9e44c2fbf30dac331e4f131c965a1504
Size

63KB
MD5

64a1f3bd225b80866bdf7fa4e5692120
SHA1

6c42728982d2e08fa0417bb2f99df4c017bb143c
SHA256

839869bb0a25b37c7b2abe8abec8efce9e44c2fbf30dac331e4f131c965a1504
SHA512

81a7454e69e299561e70d91cd81a1eeee5eb67063e70c5a6c4181b0a0d555e8a4cc142a099161074c0d8cc22e058305716209d59c6d2146c753112c16d73d51f
SSDEEP

1536:W5YLlIyMfxErT5YkpHO+6250ri4vovg1ZdW3EMpPqP2lUQHZz6Lek7bf5s2yqgEc:cLQ4e5a4llYSQf866T7F

Score

N/A

Malware Config

Signatures

Files

839869bb0a25b37c7b2abe8abec8efce9e44c2fbf30dac331e4f131c965a1504
.exe windows x86

195c7eba1f472c8c01913c3bb36f8df5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapUserPhysicalPages
RequestWakeupLatency
WriteProcessMemory
RegisterConsoleVDM
SetFileApisToOEM
WriteConsoleA
InterlockedExchange
QueryWin31IniFilesMappedToRegistry
CreateProcessInternalW
MulDiv

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE