db785aed07b7f8cc9e3ea94de1d1e0fa777bed7451bc8db42359d95020456e94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db785aed07b7f8cc9e3ea94de1d1e0fa777bed7451bc8db42359d95020456e94
Size

119KB
MD5

8516e49e0f7950d4272272d50e49df60
SHA1

e121e6400a5e199b3e0bc242350c77c8c697ed87
SHA256

db785aed07b7f8cc9e3ea94de1d1e0fa777bed7451bc8db42359d95020456e94
SHA512

78ae181cf6cc45d4d37b9a922ae970b51adddd58ee4bcf2246ae386b3e2ec5c4fd7b2309546e7dd2fdc3723683f8ecada96348fab67b49e26185b8e068e4a660
SSDEEP

3072:0UtABYKvgJc5TRb+NgLYyoHwtAJJRiFIwgQycyuG:LABYoBRbkIYtpjROIXQycRG

Score

N/A

Malware Config

Signatures

Files

db785aed07b7f8cc9e3ea94de1d1e0fa777bed7451bc8db42359d95020456e94
.exe windows x86

a07f23879339963feffee3e1adbeb598

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetExpandedNameA
RegisterWaitForSingleObjectEx
SetFileValidData
InitAtomTable
SetFilePointer
GetConsoleFontSize
HeapQueryTagW
SetConsoleDisplayMode
GlobalFlags
GetGeoInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE