0b6973954119704f55e473f9adaf70981cb909599ee334ecda81e1e7beb7cdf9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b6973954119704f55e473f9adaf70981cb909599ee334ecda81e1e7beb7cdf9
Size

83KB
MD5

332d5d1880c47ec47667bd97495fba0a
SHA1

51d9075b78a41eb677747eefd795fd3b038f1f80
SHA256

0b6973954119704f55e473f9adaf70981cb909599ee334ecda81e1e7beb7cdf9
SHA512

240a040bc8ccad32605ccf51716e8a33566bde603b38e2cec6f7283789a241c753b4eb28388fd3969093fbdd1cd6b8d42ce81b675a49e885840adeb3fb42bf81
SSDEEP

1536:8yWQJc00mVBAZ+aZlyO2F80uqJh6ltHtsNqcjEErxTWDTMqhGKYIZTET8bDQ:8q20FVB2+iO24UDcqcjBkMqhGKZTbbc

Score

N/A

Malware Config

Signatures

Files

0b6973954119704f55e473f9adaf70981cb909599ee334ecda81e1e7beb7cdf9
.exe windows x86

854f68b51a2f5cfd2234a649bef016c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
WTSGetActiveConsoleSessionId
lstrcpyA
GetExpandedNameA
ConsoleMenuControl
GetProcessId
BaseDumpAppcompatCache
GetNumaProcessorNode
SleepEx
SetCriticalSectionSpinCount
CreatePipe

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE