04e9a96a4435b4eb13532648a17f052d5166754dbd2936598659a07215b0de70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04e9a96a4435b4eb13532648a17f052d5166754dbd2936598659a07215b0de70
Size

115KB
MD5

52e55b5e6552956e66ee53654a8cdde0
SHA1

1b314cf2b332ebad4bf092406967307a3715a0d2
SHA256

04e9a96a4435b4eb13532648a17f052d5166754dbd2936598659a07215b0de70
SHA512

873225586d0d7292b0afeed9414a23882779ea15b7b05d0c49c1fa62bc07e5d556b718693fa3b0f4f0ded7372fa8b1896dbc8ef7e57ca29410f8a23731636142
SSDEEP

3072:yQtSXB9r7+54wfD9ajBkMqhGKZTbzsRg:wB9r296ibZL+

Score

N/A

Malware Config

Signatures

Files

04e9a96a4435b4eb13532648a17f052d5166754dbd2936598659a07215b0de70
.exe windows x86

77c8d22cf1765c72d6428b4ea872f1a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFile
SignalObjectAndWait
GetVolumeInformationW
GetDefaultCommConfigW
GetAtomNameW
GetLocaleInfoW
ClearCommError
BaseCheckAppcompatCache
DebugActiveProcessStop
ReadConsoleInputA
GetHandleContext

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 59KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE