1bbffdee78bea1a5d45ff5a25819436405317f6ff61690ecc2bea222022d5102 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bbffdee78bea1a5d45ff5a25819436405317f6ff61690ecc2bea222022d5102
Size

66KB
MD5

3831c6225ad04c16c00444a25e09b43a
SHA1

589e00440817b29a8d324f8de20216c24f492a4d
SHA256

1bbffdee78bea1a5d45ff5a25819436405317f6ff61690ecc2bea222022d5102
SHA512

fcf088830c7d625df96a19d8eb5e14d2ec62a18c762839889a2c9c3f52855a5e499d05ac10f9f8b75db70600929a251619169daf9cfd90c21bfe0ee2e51c3818
SSDEEP

1536:33uLpQTQ5ob/AGEApdhJo2zFTePC9StfA3rm0Edr4TzL4UinEB:HuLpQTRb/ApAvhJo2zFsXR4vENEcW

Score

N/A

Malware Config

Signatures

Files

1bbffdee78bea1a5d45ff5a25819436405317f6ff61690ecc2bea222022d5102
.exe windows x86

e1749fee4937228da1574fec7eabdf4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleMode
MoveFileWithProgressA
InterlockedExchange
GetQueuedCompletionStatus
GetNlsSectionName
WriteProfileStringW
ConvertThreadToFiber
GetConsoleOutputCP
lstrcpyn
SetConsoleTextAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE