73dcf02f795585413829c6d9b261b8c392699ddb955697da97b776e18a7f80e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73dcf02f795585413829c6d9b261b8c392699ddb955697da97b776e18a7f80e9
Size

56KB
MD5

81fa9731caf9c7aff1f82cd7881b7f13
SHA1

00f2ed649e7dd0bedae6c9b0d31d40a8f73e8cf1
SHA256

73dcf02f795585413829c6d9b261b8c392699ddb955697da97b776e18a7f80e9
SHA512

f136a460dfaf16b3157218b864e46693b884bdbd1855fc446f2c986999d68e755f9622d776c232960231fb55d8350944189a54d8b7ffa9986796404518265214
SSDEEP

1536:D3mvtA2j40R6mkET7zaGf+ygx/sXzAI/zZXKBlWCOqlxvWOGmn:DQ92Evuygm0I/NXMxBf

Score

N/A

Malware Config

Signatures

Files

73dcf02f795585413829c6d9b261b8c392699ddb955697da97b776e18a7f80e9
.exe windows x86

c0fb81d33b110372d41f7f06c6496911

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
AssignProcessToJobObject
SetVolumeLabelA
CancelDeviceWakeupRequest
GetCommandLineW
FillConsoleOutputCharacterW
GetSystemRegistryQuota
GetSystemWindowsDirectoryW
SetCommBreak
RegisterWaitForInputIdle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE