a0a4b11d14c97ede17cad79ae8edce449a6911fa4effa244427c4657c965b263 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0a4b11d14c97ede17cad79ae8edce449a6911fa4effa244427c4657c965b263
Size

63KB
MD5

90f0fa0d6e1a02c600c8ca7ccd9fbb46
SHA1

d826d1ce0ca86983cd935d582e940ae981379b46
SHA256

a0a4b11d14c97ede17cad79ae8edce449a6911fa4effa244427c4657c965b263
SHA512

68b31afe9344fee5e52ef38142d4a49536d8bac6793053abbd0ccc3f9a34d0eab7ecd57108d6334d121e05cdec3d728497e5d3210fa4f6e05ee29327f9a29d42
SSDEEP

1536:XcArSKu8TlSDdUDiOH0QqmnrT8IoxbEKViGfF:XctKFTCKD10fmT8LBCAF

Score

N/A

Malware Config

Signatures

Files

a0a4b11d14c97ede17cad79ae8edce449a6911fa4effa244427c4657c965b263
.exe windows x86

fd14b15ec9e98ea90b27bef4d7159ab8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FoldStringA
AddConsoleAliasW
GetNumaProcessorNode
RegisterWaitForInputIdle
SetConsoleCursor
RegisterWowExec
WaitForMultipleObjectsEx
LoadLibraryW
GetModuleHandleW
CreateProcessInternalA
IsDebuggerPresent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE