b398d130ef9b1fb32cc37fc698c3d066cc32c0ce5105af25f3e3a60fdd4b01bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b398d130ef9b1fb32cc37fc698c3d066cc32c0ce5105af25f3e3a60fdd4b01bb
Size

94KB
MD5

0073853a88f67b7c366beb03ba3dc790
SHA1

496fa177d44e58982ca74185ec87fd3d6bbebf05
SHA256

b398d130ef9b1fb32cc37fc698c3d066cc32c0ce5105af25f3e3a60fdd4b01bb
SHA512

8aad73c80254ac18eeaefffd56eeab7f886d1a8de5cfd2c8c5cf362cfa66ec3485e062f315887797b0a878e7e9844ec95c768e34688fe9bbbaabdea0be1055f3
SSDEEP

1536:M1G/a5/SFMlRyTW/RHWaLgIKSwlWbxVnw/FLr9Cdi+Pvc8YaEJwZK4/83ZoMOAL0:aGkaMlRyTWAajNHHO24yvhZEXtpxLF6H

Score

N/A

Malware Config

Signatures

Files

b398d130ef9b1fb32cc37fc698c3d066cc32c0ce5105af25f3e3a60fdd4b01bb
.exe windows x86

a89dead0a481e17039924f63d2abef9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStructW
SetCalendarInfoW
EnterCriticalSection
GetCommProperties
CheckRemoteDebuggerPresent
VirtualFreeEx
EnumLanguageGroupLocalesA
SetThreadContext
CreateNamedPipeA
OpenJobObjectA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE