27edaa11747c8f13a3d0bc41ba99840fa526978785bf49509f4c73920fbd51c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27edaa11747c8f13a3d0bc41ba99840fa526978785bf49509f4c73920fbd51c6
Size

56KB
MD5

2e2a9a0c76a4568d8328bffe4db55328
SHA1

ca9ff9bef4b75d7da9a65d6d94de68dd1bbe561f
SHA256

27edaa11747c8f13a3d0bc41ba99840fa526978785bf49509f4c73920fbd51c6
SHA512

bb6c2b05ac5c4a4405f5a47e7589817fcd11def6b158c93cbbad394f6407a96f02e195d5060aa9ca4465757342e66cb4c3ce6f69ebb3cf2a5e26fb2a46b1ed2c
SSDEEP

1536:DobGW5p3OD7xiU188+I3awBxsQixYZO12Li4Shc5:DdKODVPl+IRtEY0oz5

Score

N/A

Malware Config

Signatures

Files

27edaa11747c8f13a3d0bc41ba99840fa526978785bf49509f4c73920fbd51c6
.exe windows x86

497c29f67c665b5d159d8a876f945e5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
Heap32First
ReadConsoleInputExW
NlsResetProcessLocale
SystemTimeToFileTime
TermsrvAppInstallMode
VirtualProtectEx
Module32FirstW
LCMapStringW
GetNamedPipeHandleStateA
GlobalUnWire

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE