47fff7070041c641e307d911206fc77bf486df6d496265731e4fd15177e8ff2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47fff7070041c641e307d911206fc77bf486df6d496265731e4fd15177e8ff2b
Size

63KB
MD5

6801fc70d49d7f2b6aa51531cc807242
SHA1

d3793b8176aa69f36ae0c6ef0dc045bc68027bbe
SHA256

47fff7070041c641e307d911206fc77bf486df6d496265731e4fd15177e8ff2b
SHA512

8320e0517a02e93200aeb2ef1bb7280b7435bc0607efe9f1c868edcc5d0adfb8b4166d8b927b122ddc9944bcb837fa7d8a3e4d38961f0915b06cbe43053cea6b
SSDEEP

1536:EC0pG0/axJzeM2Q10tNbuaG1P53nVkpvPTng517fIPY7S8d1:EC0pGmaxJzx106aGCpU517QPY7Sc

Score

N/A

Malware Config

Signatures

Files

47fff7070041c641e307d911206fc77bf486df6d496265731e4fd15177e8ff2b
.exe windows x86

77af9c6d6e56bb4226be569e6fa3e2a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreatePipe
SetErrorMode
CmdBatNotification
CloseProfileUserMapping
BackupSeek
_lwrite
UnregisterConsoleIME
TlsAlloc
SetConsoleMenuClose
WriteProfileSectionA
IsValidLocale
OpenFileMappingA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE