12c11a1f138784c4830cd148512dcb3b81458e3bcb1687b4a31e4ed748ebb00f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12c11a1f138784c4830cd148512dcb3b81458e3bcb1687b4a31e4ed748ebb00f
Size

76KB
MD5

a26bdf646f19622759989224cf00e260
SHA1

87dfc10a3f280aa0dda6705c81ae7998fff82157
SHA256

12c11a1f138784c4830cd148512dcb3b81458e3bcb1687b4a31e4ed748ebb00f
SHA512

797fa727389fa48740cb22f63b136fbf3391a89f1efc652f4d0272ba3daf8bfa3b05bd230ff0a24dab275eea67005a5da7f7d53506dee62508801115dc31d41d
SSDEEP

1536:1LycTVJ0aLAGvqYynu6x3Y2jy45ZrRZ8LzQEHoiphYQadjrYupjVrs2ryrd1vUQ0:1LycTVSaLXq5unR4XFZ8L018nOjJHs2N

Score

N/A

Malware Config

Signatures

Files

12c11a1f138784c4830cd148512dcb3b81458e3bcb1687b4a31e4ed748ebb00f
.exe windows x86

570634b666e5dad43561223b61e54ea2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
Process32NextW
VerLanguageNameA
CreateFiber
EnumTimeFormatsA
InvalidateConsoleDIBits
BeginUpdateResourceA
GetAtomNameW
ReplaceFileA
IsValidCodePage
LocalFree
GetCommConfig

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE