1bdd9274b63f41dbd753617a86ea56d64ebe32b8ec6414cc6a4927cb944cdf5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bdd9274b63f41dbd753617a86ea56d64ebe32b8ec6414cc6a4927cb944cdf5e
Size

144KB
MD5

7995bfd348ccd01ab40b7f768bc36395
SHA1

87a657acdfb5762e039d74e4a622162d4bfab022
SHA256

1bdd9274b63f41dbd753617a86ea56d64ebe32b8ec6414cc6a4927cb944cdf5e
SHA512

35cd60ea2de1bbd76d877cb61a2ad9c4059c146aba56bc6e7060dff92f648b7ee2dec2f72f1c67de6a446129e4e993bb126386c85c5440e677fe52e85ed50f29
SSDEEP

3072:k1y51KOJFFAbq7KxRqzHs2qmRlixXaKa0qMW2pVol3IFEyKwLR:frHGhO/wguJpVopIh

Score

N/A

Malware Config

Signatures

Files

1bdd9274b63f41dbd753617a86ea56d64ebe32b8ec6414cc6a4927cb944cdf5e
.exe windows x86

d559ee9f124c0bad6683a65e0da8c1c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseInitAppcompatCacheSupport
CompareStringW
FindVolumeClose
VerSetConditionMask
WriteConsoleOutputAttribute
InterlockedPopEntrySList
QueryDosDeviceW
FillConsoleOutputAttribute
IsBadReadPtr
GetComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE