a1e4afd43f867cfb3545ea670d097007a2224bab1fc0a7036c5ef3cfdc4e3885 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1e4afd43f867cfb3545ea670d097007a2224bab1fc0a7036c5ef3cfdc4e3885
Size

110KB
MD5

f2b189da91c25b43988b552b454b5181
SHA1

cae03a84d2eba9ad2c592d062400e21f8ea1e50f
SHA256

a1e4afd43f867cfb3545ea670d097007a2224bab1fc0a7036c5ef3cfdc4e3885
SHA512

e4d9b1757f8be5fdfd3a8d352497782f5b7a199c44e0383af04a546f230c2a09e3c62393aa1e9467b2d7c257040aa55ba708b273e56f9cfb75c3e998ba93d012
SSDEEP

3072:CyQL4JjIAQTOtnx/RF5SCsu2oh40kv3VucVEp:lcTOBF5Fsu6vFu

Score

N/A

Malware Config

Signatures

Files

a1e4afd43f867cfb3545ea670d097007a2224bab1fc0a7036c5ef3cfdc4e3885
.exe windows x86

c92bd732c5eb270e610e1bbf7b92dc40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CmdBatNotification
SetEndOfFile
IsBadStringPtrW
HeapReAlloc
DeleteCriticalSection
GenerateConsoleCtrlEvent
SetEndOfFile
GlobalMemoryStatusEx
OpenEventW
GetProcessAffinityMask
GetSystemDirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE