872a4ef0ab0d428398668c943d029f3b5752eaf06bf6a716736fe36836e13985 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

872a4ef0ab0d428398668c943d029f3b5752eaf06bf6a716736fe36836e13985
Size

63KB
MD5

a1a4a18898e48a232e6675d803e56100
SHA1

7172c8856ff51a45fa9b6bc39c6e546fec2a2d5b
SHA256

872a4ef0ab0d428398668c943d029f3b5752eaf06bf6a716736fe36836e13985
SHA512

e56a55e2c36aebde4678c8b23410f9a63f3e61af1d695b06491960f049a4a7f6bcd42b13a2540fde1a16689b2332567e03484e1652ec73547116aadda11fa467
SSDEEP

1536:a1Kp/dWxjjqukxU8zuTOoKsOAjHOXXgu2YKflK:a16/dajjqJCTfVudmw

Score

N/A

Malware Config

Signatures

Files

872a4ef0ab0d428398668c943d029f3b5752eaf06bf6a716736fe36836e13985
.exe windows x86

3e020a61d86e71dbaa1be8cb28c9166d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateVirtualBuffer
ScrollConsoleScreenBufferW
CreateMemoryResourceNotification
SetThreadIdealProcessor
_lread
LZInit
CreateDirectoryW
HeapUnlock
SetConsoleNumberOfCommandsA
SetMessageWaitingIndicator

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE