1fe859cb7e6f46d8a8e67e1e61eb017589ff913168a62d65c141a2d20581b0c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fe859cb7e6f46d8a8e67e1e61eb017589ff913168a62d65c141a2d20581b0c0
Size

222KB
MD5

bda1e93133942837507ee8e9bafdcc7d
SHA1

ea8c83413bfe9193f4db6a4cb7bed5daa130d6ad
SHA256

1fe859cb7e6f46d8a8e67e1e61eb017589ff913168a62d65c141a2d20581b0c0
SHA512

33fa2240f64ab14c0d88b4efab8fc0170866d26131176bb7741be0eda690570184be54bc53c2621a4df1805bfeefa27aabbd8c035d9f2797e34aed43a9db1265
SSDEEP

6144:DF/opsBzViBCGidLJXDilaiHu8QZ5raa6T1:DF/opsBUn6L1iO/exT1

Score

N/A

Malware Config

Signatures

Files

1fe859cb7e6f46d8a8e67e1e61eb017589ff913168a62d65c141a2d20581b0c0
.exe windows x86

b3b84238de271facd907ccf595edf4da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
WriteFile
ReadFile
SetFilePointer
CloseHandle
GetModuleFileNameA
GetCommandLineA
CreateFileA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 347B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ