f06e0ed4d97bbea665ce6a1af74916e6f8e49cb4a9898f88af7fb1240b125385 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f06e0ed4d97bbea665ce6a1af74916e6f8e49cb4a9898f88af7fb1240b125385
Size

76KB
MD5

a19782948dd26bba244ddd9108e68b36
SHA1

281f8c5b1cc1611d8aa7c5d52e11d8b739c908e1
SHA256

f06e0ed4d97bbea665ce6a1af74916e6f8e49cb4a9898f88af7fb1240b125385
SHA512

5e717240ca64d20434fc2c33e607f9b86c6924a1abfdd12a4a965eadd23ec4d253a39ac026404049c19c6abf5bbb829ca9ac200b775fbd482a8232662c821455
SSDEEP

1536:1ruC5iw/Jpo7xTE1QQJ1AA/sbKIPAlI96ZomExFndpjVrs2ryrd1vUQuq6:Ep+vJz/sbK26ZKFdHs2qo

Score

N/A

Malware Config

Signatures

Files

f06e0ed4d97bbea665ce6a1af74916e6f8e49cb4a9898f88af7fb1240b125385
.exe windows x86

1643e3c51d4e6f8a6e54bf4bc63f7d41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EscapeCommFunction
DnsHostnameToComputerNameW
CreateFileMappingW
GetProfileSectionA
GetDefaultCommConfigA
EnumDateFormatsExW
RtlMoveMemory
FormatMessageA
WritePrivateProfileStructW
QueryInformationJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE