3f49c5bcf36c176339c526aa2f9a3aa1664a6864e7572c242c65ff45c80d0bb2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f49c5bcf36c176339c526aa2f9a3aa1664a6864e7572c242c65ff45c80d0bb2
Size

94KB
MD5

ee5a4c8b72d812b4fdd4eb9d36b6ef1a
SHA1

5cbe51c07e6f9eed2ffa64a25a96fafd3e0de66e
SHA256

3f49c5bcf36c176339c526aa2f9a3aa1664a6864e7572c242c65ff45c80d0bb2
SHA512

46cba9dbfa68b76b5a3efd7c24f922d558067d498dd61caf1e2719f1c3799d9a002bbb9e299e60804c4f81760e2b7d1c7ea5e4bbd1665e0747c2a90eb4adfcfd
SSDEEP

1536:9exMHhBhLsw0jpY7V+m+QR3grg0g+m8oUvStc8YaEJwZK4/83ZoMOA/szm7:Ex6hi88mYKz8oUvwhZEXtpx/V

Score

N/A

Malware Config

Signatures

Files

3f49c5bcf36c176339c526aa2f9a3aa1664a6864e7572c242c65ff45c80d0bb2
.exe windows x86

afa2dd602c180de5f5f5c6e0b8220627

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
FreeResource
GetConsoleCommandHistoryA
LZClose
CreateMailslotW
AddAtomW
GetCPInfo
PulseEvent
TransmitCommChar
GetProfileSectionA
EnumLanguageGroupLocalesA
EnumSystemLanguageGroupsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE