57e1328469fc57f6d179d3e655fc9c68ec83c9eb3d4b8f14b0526b5c43f979aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57e1328469fc57f6d179d3e655fc9c68ec83c9eb3d4b8f14b0526b5c43f979aa
Size

63KB
MD5

803d268d15deab2b81008cbd768faa30
SHA1

d55a8f9e1cc0c5748cca7ef8c1555bc8d04e9056
SHA256

57e1328469fc57f6d179d3e655fc9c68ec83c9eb3d4b8f14b0526b5c43f979aa
SHA512

4d3e4801601d478de2b975243e02ae35e0f0f6d4187aebc38a4d68694a93393586125d7fc3e82cb5a25320a64d1b7e31c97dacb338803e2300a1db53a4d982b4
SSDEEP

1536:P+Uwipu3hGu9wva+ffdVkOfBULoD/wSEvW:Pnpu3oOgvdVdZxd

Score

N/A

Malware Config

Signatures

Files

57e1328469fc57f6d179d3e655fc9c68ec83c9eb3d4b8f14b0526b5c43f979aa
.exe windows x86

847773be6ee05f8d6d3a207d8df46989

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberOfConsoleInputEvents
CreateNamedPipeW
RemoveLocalAlternateComputerNameA
LZClose
FindNextChangeNotification
ReleaseSemaphore
SetConsoleMode
MapViewOfFileEx
GetProcessShutdownParameters
ExitThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE