47ddf9b8a9be62b6768e66123c74fda0ec2f3a79f8f94a38da272417a7285fd1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47ddf9b8a9be62b6768e66123c74fda0ec2f3a79f8f94a38da272417a7285fd1
Size

63KB
MD5

8185f6753256f0f14156b203ea17c410
SHA1

1dda2937de0f833745ef429423bfa4e03972e00e
SHA256

47ddf9b8a9be62b6768e66123c74fda0ec2f3a79f8f94a38da272417a7285fd1
SHA512

233e5954352c37afc891f31d9fc1cbecc2ab23d5ed6ff06bd6bd937e72f2d74cfdd7f62cb6ea3213590642e7090eee9f9a638939b021ec11a451a2a456615f32
SSDEEP

1536:Hl0rhWi1gzI1N5iOc1kNDvF6LQyJZ99UnqdfSJ8nf:GrYkgc1NEkgrqG

Score

N/A

Malware Config

Signatures

Files

47ddf9b8a9be62b6768e66123c74fda0ec2f3a79f8f94a38da272417a7285fd1
.exe windows x86

338d3affcd8a4e064cdb7212e95ebbcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerifyVersionInfoA
LocalFileTimeToFileTime
SetConsoleNlsMode
VirtualProtect
DebugActiveProcess
OpenFileMappingA
FatalExit
PulseEvent
DeleteTimerQueueEx
GetConsoleAliasExesLengthA
EnumLanguageGroupLocalesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE