d4ef0eee310cf4dcc92950fe199ed9b7fbd6a1bfe6fefb3a83e7901d675f4ee8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4ef0eee310cf4dcc92950fe199ed9b7fbd6a1bfe6fefb3a83e7901d675f4ee8
Size

76KB
MD5

9210bb49b902146c0055ae08efcfb060
SHA1

329d88bef2b58007ab8fb22fd01567700c2b2308
SHA256

d4ef0eee310cf4dcc92950fe199ed9b7fbd6a1bfe6fefb3a83e7901d675f4ee8
SHA512

59c5c9ed1326eead09d6cd5c12d016f826b668ec31ca5e945b846cfd7a74e549e4111f8b1acd6ba4340ac5623b6dfe5a6a79b49fd69d9288356f7fc8dae3a8d6
SSDEEP

1536:Q3333wzbu7rGaCODuXuF14+OpFeceiWkFz8pKjEErxTWDTMqhGKYIZTET8x:JirGyH1piWMopKjBkMqhGKZTbx

Score

N/A

Malware Config

Signatures

Files

d4ef0eee310cf4dcc92950fe199ed9b7fbd6a1bfe6fefb3a83e7901d675f4ee8
.exe windows x86

8e9fedcf346821eac205133f1c79f5de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaProcessorMap
GetWindowsDirectoryA
GetConsoleAliasesW
WriteProfileSectionA
IsDebuggerPresent
BaseProcessInitPostImport
LocalShrink
InterlockedExchange
GetConsoleAliasesLengthW
LockResource

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE