677795df6084b81198ec20b9aeb3e9ff929cfdc713f822b64ddcf19d0e1bf819 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

677795df6084b81198ec20b9aeb3e9ff929cfdc713f822b64ddcf19d0e1bf819
Size

63KB
MD5

a096dc3a564d10d7a035cc1aaa9229a3
SHA1

3e2b40da0f3024dca26de461b768ea7423c42c52
SHA256

677795df6084b81198ec20b9aeb3e9ff929cfdc713f822b64ddcf19d0e1bf819
SHA512

92035d38f7e2e71984d018cbe2b057c7cd9666a43631e36ed3a005e85ca4bd013a25a609a166cb965404ce7c4d8a5e7f8aed7d5fb6648bbfeac12efdbabfec97
SSDEEP

1536:Nrae+vCTfHSWW3bE8y/1f/Vnuyg24jC7XjQ:NrH+K2WW3Yz0yg24uw

Score

N/A

Malware Config

Signatures

Files

677795df6084b81198ec20b9aeb3e9ff929cfdc713f822b64ddcf19d0e1bf819
.exe windows x86

6cede580853ca428d0d0e277bf8b5781

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateHandle
TlsFree
DebugActiveProcess
ReadFileScatter
GetCommModemStatus
GetWriteWatch
OpenConsoleW
VirtualLock
GetProcessHeap
EnumResourceLanguagesW
HeapExtend
PeekConsoleInputW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE