a1a5bff77bbc23bd7a23e6591d67cc5666fc0add967cd0bb09c234794e833f62 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1a5bff77bbc23bd7a23e6591d67cc5666fc0add967cd0bb09c234794e833f62
Size

68KB
MD5

5d12762dc044983e553dce0afef72770
SHA1

f79fb767ec7df79cb1cfc80e6b5d2a19bff8a92b
SHA256

a1a5bff77bbc23bd7a23e6591d67cc5666fc0add967cd0bb09c234794e833f62
SHA512

339273dbf09a3b30cc769750e7d83c8e6fcadfd696f2d4b51b2e8e1d08a259fe3ada5ad8db415572aa9fd3498fbb3aea4061cfc28279dc68bde3491ed1416339
SSDEEP

1536:BhAB541OsdMx1XD/KGvngDK8osGy8VC1lXZ8xJmfG9iN:n0Nb1XDiGvngDK8oi8Vceg6iN

Score

N/A

Malware Config

Signatures

Files

a1a5bff77bbc23bd7a23e6591d67cc5666fc0add967cd0bb09c234794e833f62
.exe windows x86

6ac3c362103a104465e3d24a4dd06be7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTimerQueueTimer
CreateProcessInternalA
FindResourceExW
CopyFileW
SetThreadLocale
BaseProcessInitPostImport
ReadFile
ReadConsoleW
SetConsoleActiveScreenBuffer
CompareStringA
TrimVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE