5012627b37ae1f933dc263a8a0884eb4e609f426de18ce9d71ba952827bd2c2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5012627b37ae1f933dc263a8a0884eb4e609f426de18ce9d71ba952827bd2c2c
Size

320KB
MD5

807861d095cff7671d14149c10480fb0
SHA1

32c4a102ae0cca09d2ad0f90d657d23af261de31
SHA256

5012627b37ae1f933dc263a8a0884eb4e609f426de18ce9d71ba952827bd2c2c
SHA512

c8ec3e35993743084de8ebf6c6a58f4f0c790c313db72ee1c85cea4c2e11d930ba7a2c304f90d427d654e85599e9a0d9a5d40f1e830bb68ce5ab4db943aa82dc
SSDEEP

6144:ZflQhKA8iH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Zfqkg2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

5012627b37ae1f933dc263a8a0884eb4e609f426de18ce9d71ba952827bd2c2c
.exe windows x86

2ef2dfda501811107aeb84aaae0abf27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleScreenBufferInfo
CreateProcessInternalA
FindResourceA
CreateFileA
lstrcat
FillConsoleOutputAttribute
Process32First
FillConsoleOutputCharacterA
LZInit
ValidateLocale
GetProcessWorkingSetSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE