636f248e7b271b2c3e81ee5517e7073512cde7790014c7d033c9f97b6d462829 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

636f248e7b271b2c3e81ee5517e7073512cde7790014c7d033c9f97b6d462829
Size

76KB
MD5

0ad086480d2fbe8b5fb408652aeb4fa0
SHA1

f49770a09b37df93d7294d7e9f11140a0a8beea1
SHA256

636f248e7b271b2c3e81ee5517e7073512cde7790014c7d033c9f97b6d462829
SHA512

e27a866ed5134f0e4529b34ad5836886482267dcfd66ca45e7a5867a8c1c1092ddfb47df279b5b171c0ce99889ff1d1d3eec0ac3357ebe848789a7f9e03f254c
SSDEEP

1536:BFm0A8UFWm3BX9E4yLpM5rIgqY0t9MS3y64GxaJ+jEErxTWDTMqhGKYIZTET8x:XTAdFZa4lsVl3y0jBkMqhGKZTbx

Score

N/A

Malware Config

Signatures

Files

636f248e7b271b2c3e81ee5517e7073512cde7790014c7d033c9f97b6d462829
.exe windows x86

79fd3b67c2534aa6896ffdef43e046fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemRegistryQuota
FindNextVolumeMountPointA
_llseek
GetConsoleTitleW
GetConsoleCommandHistoryW
CommConfigDialogW
SetHandleContext
ReadConsoleOutputW
WriteTapemark
lstrcmpW
GetDiskFreeSpaceExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE