f4ea0054708a4a70f407e4817134e3add8b0ba1e5f8295c33c9207d559d44849 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4ea0054708a4a70f407e4817134e3add8b0ba1e5f8295c33c9207d559d44849
Size

63KB
MD5

6607a833db13f81a8773b113d4944e50
SHA1

cbd259c1495d8b05ec46d6f40e424e57ad8c0bff
SHA256

f4ea0054708a4a70f407e4817134e3add8b0ba1e5f8295c33c9207d559d44849
SHA512

da3e41cbb1b0f862dad24b2cd175e9df83197d5df2232bd35d75c655e69af4e4a5b140bf75e664949f406851678f3f116595c29b7aefd78b420f5ddb6d9ee08a
SSDEEP

1536:v+goA2biSDj+CopiWHD/Py+tQhfF8CEAw6gukEFngriCZCjW0ys3Lo:v4e4qDcCXmqC/gxpEq0ys7o

Score

N/A

Malware Config

Signatures

Files

f4ea0054708a4a70f407e4817134e3add8b0ba1e5f8295c33c9207d559d44849
.exe windows x86

374b97e72d27a0ecb0e8a8fc97354175

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateTapePartition
GetConsoleInputWaitHandle
GetTickCount
GetCurrentActCtx
ShowConsoleCursor
WriteProfileStringA
GetProfileSectionW
ExtendVirtualBuffer
EraseTape
SetLocalPrimaryComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE