fed71fc5d06bb9ef9324248ef2a1503704ed70635ee78e075d8fb2b3100eb183 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fed71fc5d06bb9ef9324248ef2a1503704ed70635ee78e075d8fb2b3100eb183
Size

144KB
MD5

68fee80a83567514616a170f97d88fb7
SHA1

0879fc2a8e41e422ad41a362c62bda2c86c412ad
SHA256

fed71fc5d06bb9ef9324248ef2a1503704ed70635ee78e075d8fb2b3100eb183
SHA512

d8b9d0e741bb1a95a71970bd935de3af09c847a9fe6be34f463e2c5431bd54baea4a67b4e2e07e31fe334a838485534879a6dadb00c41882c430683e9af5b1a7
SSDEEP

3072:BYWbhBDibn1leuHs2qmRlixXaKa0qMW2pVol3IFEyKwLR:yWNBuLvh/wguJpVopIh

Score

N/A

Malware Config

Signatures

Files

fed71fc5d06bb9ef9324248ef2a1503704ed70635ee78e075d8fb2b3100eb183
.exe windows x86

7ab0de8834841518254e601f9ea7dcd9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
SetConsoleMode
WritePrivateProfileSectionA
GlobalUnfix
AddAtomA
EnumResourceNamesA
GetConsoleAliasesA
InterlockedIncrement
IsSystemResumeAutomatic
InterlockedExchangeAdd
WriteProfileStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE