045587f2cec0ed6d3cf48c6ae0017f37aeebf9f268baee8090f7e99195124600 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

045587f2cec0ed6d3cf48c6ae0017f37aeebf9f268baee8090f7e99195124600
Size

62KB
MD5

a17017e1679bf34c995ffa0db811e920
SHA1

1ddbf7cfa0fede13c9105d337a654c8c235a6bc0
SHA256

045587f2cec0ed6d3cf48c6ae0017f37aeebf9f268baee8090f7e99195124600
SHA512

946283acf151810f04afb32bd05d3739d656f405d5432cde156318b8ab1a7b3068b12f005956c0b17a25e2142b1d3217366d07641dfb3ca1ea6dc05b24dd0005
SSDEEP

1536:iGwVg1jNcdTtKMaX2jwxAf+dZEXIACfLhzZe8:i9VgzYTtJWewBHEXRmne8

Score

N/A

Malware Config

Signatures

Files

045587f2cec0ed6d3cf48c6ae0017f37aeebf9f268baee8090f7e99195124600
.exe windows x86

55a4635313c8459b193edb799892f384

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextVolumeMountPointW
GetAtomNameA
CreateFileA
OpenJobObjectA
GetThreadSelectorEntry
CreateJobSet
ReplaceFileW
DeleteFileW
ActivateActCtx
ReadConsoleInputW
ReadConsoleInputW
GetCPInfoExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE