27aa659eb92d92603cf48924fa223ff1957d5687b5f2d3b0a838441f2045b895 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27aa659eb92d92603cf48924fa223ff1957d5687b5f2d3b0a838441f2045b895
Size

66KB
MD5

84de94a8da3e0cb47a185bbdb90b4490
SHA1

6bdce2d844cd389bbc8436a21600d7117e38468f
SHA256

27aa659eb92d92603cf48924fa223ff1957d5687b5f2d3b0a838441f2045b895
SHA512

dc402198dfc2601e5eede2cbd7b0627a0a1448b9651dce35770b1cb1f549a4b59df24c745cb5ef740c18d4b3fe17902f4320e77988bbe8bd59abc4dfcf00ca62
SSDEEP

1536:Yb4Emo5Q1UCjHdJUmbzVUw9GxCn3BnEPY8Rg6sjiBGUUTNdAtpMoIz7Cg:RlWQ1UCjPUQV9GsRH8KXiBGhTNGbGGg

Score

N/A

Malware Config

Signatures

Files

27aa659eb92d92603cf48924fa223ff1957d5687b5f2d3b0a838441f2045b895
.exe windows x86

51423bb36421811f8277bda7ad0ba61c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalExit
IsProcessorFeaturePresent
FlushConsoleInputBuffer
Module32Next
EnumResourceLanguagesW
TransmitCommChar
PrepareTape
ConvertThreadToFiber
IsValidCodePage
GetGeoInfoA
TerminateProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE