a9345fab7b353aa5317eec15a0704d6c0deb2aa4b96707648c541b28e1144529 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9345fab7b353aa5317eec15a0704d6c0deb2aa4b96707648c541b28e1144529
Size

56KB
MD5

80430727d43e31fab473d293dd887b50
SHA1

3676b2f28206a2140fa985a6820a488f79df9cfb
SHA256

a9345fab7b353aa5317eec15a0704d6c0deb2aa4b96707648c541b28e1144529
SHA512

6b8f283e137d948ac2f826b9fba0e800fbcd1bb0c84a314ae61c6e28f9d7efe66de8155d3e86720509ba6f69daad9888a4f8ee11fb165bd89f1cac2240a44e38
SSDEEP

1536:FTqKb27id0JsOx2IMyUBYL+/9dPl1nBOAm6k6:FTqmqUGGICYI9xlxBO116

Score

N/A

Malware Config

Signatures

Files

a9345fab7b353aa5317eec15a0704d6c0deb2aa4b96707648c541b28e1144529
.exe windows x86

ddad67285371a384e17726d79b938101

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocConsole
_llseek
SetThreadIdealProcessor
HeapFree
CancelTimerQueueTimer
SetCommMask
GlobalFindAtomW
WaitCommEvent
GetUserGeoID
UnmapViewOfFile
VDMConsoleOperation
Module32NextW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE