f525d3112bb230d77913a35aaec45e0b2104b400adae787df5f074989063057e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f525d3112bb230d77913a35aaec45e0b2104b400adae787df5f074989063057e
Size

180KB
MD5

626de3d80607491a8068607c2ea2b0d0
SHA1

d5cdffce4d0764f1ca130fddfd4e9629d16694a5
SHA256

f525d3112bb230d77913a35aaec45e0b2104b400adae787df5f074989063057e
SHA512

3812ef2085811d9f2b7ce85ebf43585dda2f31445c4005666dc109c9e29416d74c5baea604fd44010ae99c21284e296248449df846d201f0e23741e6bbd69d75
SSDEEP

3072:kiOm5QUXgnAvyjFWxwQTE7NJkzxMczedHBZZg17vlY8CdU2cGxCWPnT:/3QUQnIyjFWuQT8OicyNbZk7O9dwGxT

Score

N/A

Malware Config

Signatures

Files

f525d3112bb230d77913a35aaec45e0b2104b400adae787df5f074989063057e
.exe windows x86

e07be82ff60a839857733daf27ee7d20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushViewOfFile
FatalExit
LoadLibraryA
FindAtomA
ResetEvent
CommConfigDialogA
RegisterWaitForSingleObjectEx
Heap32ListNext
GetVolumePathNameA
DebugActiveProcess
Module32NextW
ReadConsoleInputW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 165KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE