49d00aad075c78a5248d71ac69eb64c3842e44f7ae1e4535414aa645761d2d50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49d00aad075c78a5248d71ac69eb64c3842e44f7ae1e4535414aa645761d2d50
Size

63KB
MD5

71236f33359edb6844c9b6c4197b3800
SHA1

0ca648ae2db42e5c6f1e8d77e3737897af5abde6
SHA256

49d00aad075c78a5248d71ac69eb64c3842e44f7ae1e4535414aa645761d2d50
SHA512

01ce39e2d870d2a8036ef983936fd19b61dd0768eaacf916432b9a833c0f53f7c14775e6e3486f6fbf7dfa477a06cbbf19ac82dc097293b366c0b3c30954121e
SSDEEP

1536:liPRQkNteT4+yZJ74pEh845k1eAsh4l91WEwM4:liZQkec+yZuEPS+M4

Score

N/A

Malware Config

Signatures

Files

49d00aad075c78a5248d71ac69eb64c3842e44f7ae1e4535414aa645761d2d50
.exe windows x86

65ee195227cbc710d3ef5d3ed256c3b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryA
CreateFileW
SetVolumeLabelW
QueryInformationJobObject
MoveFileA
CancelTimerQueueTimer
CreateProcessInternalWSecure
CancelDeviceWakeupRequest
CreateHardLinkW
GetProfileIntA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE