fca9cc4766f7f94f091c2fbea6bc40d314c4d5faa0864957b93552545978274b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fca9cc4766f7f94f091c2fbea6bc40d314c4d5faa0864957b93552545978274b
Size

90KB
MD5

0bf8657ddc542e76f5cdfcf8c646815b
SHA1

4383d3353654042c0e199a50b333d7125cfe2610
SHA256

fca9cc4766f7f94f091c2fbea6bc40d314c4d5faa0864957b93552545978274b
SHA512

5010d7822e84315c5f91b487af6f0265b3c9382a1b7831468091acca3c0c3b2affc01977cab1be25674151d837c2507bc1b9cbe1c16dedf96e835134968b08e6
SSDEEP

1536:B/aknPdAcZwbn7Q5sa26qw5dzDrrM/FrV/yZCBHE82hW8fPLLypli9:B/akPdnZwb7tZw5dr6dy4Bk8vYLLyi9

Score

N/A

Malware Config

Signatures

Files

fca9cc4766f7f94f091c2fbea6bc40d314c4d5faa0864957b93552545978274b
.exe windows x86

f4ff3ea95c52fbe4494221bed01f5cc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
DebugBreakProcess
lstrcmpiW
EnumSystemGeoID
InterlockedExchange
GetThreadTimes
FillConsoleOutputCharacterA
Process32FirstW
ExitThread
SetTapePosition
ExitProcess
GetCommTimeouts

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE