ff647e93fc71ce29f031247844822ab6e79a107fede5a34d563233939837802c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff647e93fc71ce29f031247844822ab6e79a107fede5a34d563233939837802c
Size

63KB
MD5

098755ea24f7a0564c8ea00e9558bfea
SHA1

bbc737bbe8bb82472f3c239117250435b646c4dd
SHA256

ff647e93fc71ce29f031247844822ab6e79a107fede5a34d563233939837802c
SHA512

093412c0fa8c0b05f311776ac618f7c576476522a9491bd449c8676882d9a781cd8cb186db8fec91b63ef0d2647844f593fd529ff488dea5223e689fbcd64533
SSDEEP

1536:6hdnfum6cUk33+dMrtkZY29ExavKpdnhfA2j2zLsku:6hdnGvRu29EkvYA2azLxu

Score

N/A

Malware Config

Signatures

Files

ff647e93fc71ce29f031247844822ab6e79a107fede5a34d563233939837802c
.exe windows x86

bc72fe7252daed155a4edad8a06d5b85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexW
GetHandleInformation
GetFileType
GetConsoleKeyboardLayoutNameA
SetConsoleTextAttribute
CreateDirectoryA
SetConsoleLocalEUDC
Module32Next
FindResourceA
GetEnvironmentStringsA
DeleteAtom

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE