47b99a671faba4986dfeb950546c8d27398781c9a4de80d4b06c11d8d72ccbce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47b99a671faba4986dfeb950546c8d27398781c9a4de80d4b06c11d8d72ccbce
Size

62KB
MD5

9009b15d597361615ef164e47429d0d0
SHA1

8e1e69cc1b1ed1bb9ec373d4f9335f855e17a613
SHA256

47b99a671faba4986dfeb950546c8d27398781c9a4de80d4b06c11d8d72ccbce
SHA512

4d020707c774974898a8f100b3893e0bb400bea8b05f4a60c009daa74efa85cb1bec0fe1f384bd32dc1b5a21561621e1ff522696126982170c5f87227ec91100
SSDEEP

1536:ip7/+AJyJo3LXGT+qROJVmp6sCzAT4V5IN7f9DSBMCO:47WFJoYREIuVafwMCO

Score

N/A

Malware Config

Signatures

Files

47b99a671faba4986dfeb950546c8d27398781c9a4de80d4b06c11d8d72ccbce
.exe windows x86

a25ec4cbc97aedc0e2320e24c5ec9d39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupWrite
Process32FirstW
GetModuleFileNameA
SetProcessPriorityBoost
GetCommTimeouts
LCMapStringA
_lclose
OutputDebugStringA
DisableThreadLibraryCalls
FindResourceExW
GetQueuedCompletionStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE