696c78c1a739d61d7058d3adad1e42ad6291eb9d9dd42afccc6b5c9505468b36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

696c78c1a739d61d7058d3adad1e42ad6291eb9d9dd42afccc6b5c9505468b36
Size

61KB
MD5

0ccb607ae804f97b57f79db9946ebced
SHA1

1660b6f9f564d04ed2013989d7c66c069bc4c312
SHA256

696c78c1a739d61d7058d3adad1e42ad6291eb9d9dd42afccc6b5c9505468b36
SHA512

32dcac73e3e687c1161a3bc5aa6271f9f0020f3ab11021c5b14e70cba835006d4b6fc2bc40214324e71cbe44f52d26e62d1d0189f68818fbbe085ab62c3bc66a
SSDEEP

1536:BBBBBChctyTz2y9syK1wxjH7Dx7+ZdlwxIO+/nU1R0VVrKXK8qvbr:BBBBBlCzTsp6HDx7+kL6LVVrN8qvbr

Score

N/A

Malware Config

Signatures

Files

696c78c1a739d61d7058d3adad1e42ad6291eb9d9dd42afccc6b5c9505468b36
.exe windows x86

4ce16daf3238f145d8ef63fd6a0694ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasesA
OpenMutexA
CreateFileMappingW
lstrcpynA
TlsGetValue
VirtualAlloc
HeapExtend
QueryDepthSList
InterlockedPushEntrySList
SetEvent
MapViewOfFileEx
ConvertFiberToThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE