1b19762a87fcb33faa02c7231d008c4d0529dc88c430c38f0db2375dbe12755f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b19762a87fcb33faa02c7231d008c4d0529dc88c430c38f0db2375dbe12755f
Size

66KB
MD5

5349f244851b1f6feadd25d04ee10786
SHA1

b94dd2dd93c30f5dd39ae86baaae7a72da149e29
SHA256

1b19762a87fcb33faa02c7231d008c4d0529dc88c430c38f0db2375dbe12755f
SHA512

6a7611cbb26e397738d3585e1049a495a0b039ec782e15db76673987addaae91530f798194e727e6cf73682e26ff230d9578dde19b276affce518718d531cd4b
SSDEEP

1536:G3tPplgU1lYCjBDSqsxmGqInLgjfC+Ytqdn7Hq9rjxmIKPpr:etPEYiCNKxmGyj6+Ja1m3

Score

N/A

Malware Config

Signatures

Files

1b19762a87fcb33faa02c7231d008c4d0529dc88c430c38f0db2375dbe12755f
.exe windows x86

07e7657e0208f37270c39b673538223b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNextVDMCommand
GetNumaHighestNodeNumber
FindFirstFileA
SetConsoleCursorInfo
GetSystemWindowsDirectoryW
WaitForMultipleObjectsEx
MapUserPhysicalPages
ReplaceFile
ReplaceFile
ConvertFiberToThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE