f179a91a4cd119645669cba20f1867db2195a32ed5b9fd34b4993ad638230c8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f179a91a4cd119645669cba20f1867db2195a32ed5b9fd34b4993ad638230c8e
Size

501KB
MD5

92503eb5ed01f56ae7b18a10b1e50fc0
SHA1

97da28fae5500dc15d7a3c0dfac03e84bd7d2574
SHA256

f179a91a4cd119645669cba20f1867db2195a32ed5b9fd34b4993ad638230c8e
SHA512

3da263dd63d0a8190fd02a26321c1016bdd5dd56d7f575cef7d59ba8b14323f963ffba5b4d418ecb2332d4534dccbbd247349808624547bb0e142d267a46df88
SSDEEP

6144:moyLJ0d+D/wguJpVopIM/eiG3cE9bAxsfW7qz1jC84PXJcKK8dz5CnezFOHP9DgC:DdtjJ7oaz33O6euNC8+Zwp5k6

Score

N/A

Malware Config

Signatures

Files

f179a91a4cd119645669cba20f1867db2195a32ed5b9fd34b4993ad638230c8e
.exe windows x86

fd89a280e8ea06a3c28d539ce8b36f5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
GetSystemWow64DirectoryW
ValidateLocale
FreeVirtualBuffer
SetThreadContext
NumaVirtualQueryNode
ZombifyActCtx
CreateProcessInternalWSecure
GetConsoleAliasesLengthW
GetMailslotInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE