761ca4c4e66f5a533f4155e689cbf71233a626bddd7161db7288467ed2bffceb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

761ca4c4e66f5a533f4155e689cbf71233a626bddd7161db7288467ed2bffceb
Size

96KB
MD5

81728ab137977c2eb00c2b259a470ad0
SHA1

6425f40029a57cfb0a5145e325f785c759d56100
SHA256

761ca4c4e66f5a533f4155e689cbf71233a626bddd7161db7288467ed2bffceb
SHA512

80b4791d7f34941594e2a5d7ad9f9ae40a9bba9a8e8eb27c4d8f4ee9709f15d60ed2d3c7d9ea4d7cb0681355348365bcf2dde1c0b6a43622221a93a41e342240
SSDEEP

1536:/hwdcYbxhUC3X+WV4AY+6knIuS09gumaiJpjVrs2ryrd1vUQuqSuWnRrF4O5+n6W:p3EUa+9zOKzaiJHs2qmRlixH

Score

N/A

Malware Config

Signatures

Files

761ca4c4e66f5a533f4155e689cbf71233a626bddd7161db7288467ed2bffceb
.exe windows x86

e08a0c51cdb7e7ae88321fa68b055b44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberOfConsoleFonts
IsWow64Process
lstrcpy
BeginUpdateResourceW
DuplicateConsoleHandle
ReadConsoleW
WaitForSingleObject
_lclose
GlobalUnfix
SetProcessShutdownParameters
TransactNamedPipe

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE