13fe61945f48776a2627521382194994c97cb33313044db0f999faa13aa76454 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13fe61945f48776a2627521382194994c97cb33313044db0f999faa13aa76454
Size

301KB
MD5

966d5d666207d07acc782eeda0e1a720
SHA1

dcba6f5c759f2e38f07008ba7e7470052a1d721c
SHA256

13fe61945f48776a2627521382194994c97cb33313044db0f999faa13aa76454
SHA512

18b31e5b10ce3c77300605c130443181cf946eac90ea359b986a349cb96ca2d554419f47a0c41e2b18813c360a7854d44e0a5cf1fcd8e7c12dc138e6d90b417c
SSDEEP

6144:ZO2zJaxOE5IKitXEyPQxuGXzEzkJBARWp7dSApSgwbS3M:Nz8D5IKFyknzEknN7FSg6

Score

N/A

Malware Config

Signatures

Files

13fe61945f48776a2627521382194994c97cb33313044db0f999faa13aa76454
.exe windows x86

b908890ddb1f629b8c58b15fa75e94f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetExitCodeProcess
HeapFree
GetLastError
SetEnvironmentVariableA
GetShortPathNameW
GetModuleHandleA
GetLogicalDrives
HeapCreate
SetFilePointer
lstrcmpiA
SetLastError
GetTickCount
lstrcatW
TlsAlloc
GetStringTypeW
GetConsoleTitleA
GetVersion
SetPriorityClass
GetModuleHandleW
GetStdHandle
IsValidCodePage
GetDriveTypeA

netshell

DllRegisterServer
DllCanUnloadNow
HrLaunchConnection
DllGetClassObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE