68caac45b3affcae8876b15bf956505c41745bb3e06e8c438ac40273dd7555bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68caac45b3affcae8876b15bf956505c41745bb3e06e8c438ac40273dd7555bd
Size

92KB
MD5

a2dc352ae7b916f51bd3c5d6855265c0
SHA1

61ad0522ae80876993d0750a18b538fc6fb1908e
SHA256

68caac45b3affcae8876b15bf956505c41745bb3e06e8c438ac40273dd7555bd
SHA512

b05753b5c59a8588da0d12afd399c10de5f1859adfa3c56574dd29ac634ff572a14e94acbc51d3fe7f21490ec4144125eb825f68118fa05ee0075405826de3b6
SSDEEP

1536:SJiGn4eI1zOl3O/6qPOluF/2jqVXDGQSD39HyhjEErxTWDTMqhGKYIZTET8u5j6d:JS4B1qxYVZlHoyhjBkMqhGKZTbuwgWW

Score

N/A

Malware Config

Signatures

Files

68caac45b3affcae8876b15bf956505c41745bb3e06e8c438ac40273dd7555bd
.exe windows x86

48cfd35a8f75c176fd36b1c268b82629

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
UnlockFile
SetMailslotInfo
TlsGetValue
WriteConsoleOutputW
GetVolumePathNamesForVolumeNameW
ReadConsoleInputExW
BackupRead
SetCommState
CreateProcessInternalWSecure
ReplaceFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 26KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE