0125971234726239774a0c162f230ba0dd0ff27358d9804f7bdfc057539051f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0125971234726239774a0c162f230ba0dd0ff27358d9804f7bdfc057539051f3
Size

63KB
MD5

685b6ac034cda9844f2f749d57e6f87c
SHA1

255c7e3bab3eb0c83bc069c45be59db8d6b306a6
SHA256

0125971234726239774a0c162f230ba0dd0ff27358d9804f7bdfc057539051f3
SHA512

f35edb7b6cf3f0e371ff03aafe719537afd328879ca0f532dcb916cc48ee4119bfd9b4eddaa0e9c51eba99d61494c3bdaa34e2b00c8986fe201ea1ee11d84a81
SSDEEP

1536:TgKUfJInfMF61IocGcv8Vp/z+dOd87bREg:T2fJInffqkVVBgx

Score

N/A

Malware Config

Signatures

Files

0125971234726239774a0c162f230ba0dd0ff27358d9804f7bdfc057539051f3
.exe windows x86

ccaf07d1cda34c73c12b9b13953ca268

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesW
DecodePointer
ReplaceFile
GetGeoInfoA
GetFileTime
GetStartupInfoW
HeapQueryTagW
CheckRemoteDebuggerPresent
GetModuleHandleA
VDMConsoleOperation
ConvertThreadToFiber

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE