689b4182e40046942f5697fd9b49373c23b98ea63f01eac647bc6e2c80d3f164 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

689b4182e40046942f5697fd9b49373c23b98ea63f01eac647bc6e2c80d3f164
Size

110KB
MD5

a3a11f995ecbff489a84526c87ebbb42
SHA1

d5de8d990249ab056a09bba780b5f638bf9bca85
SHA256

689b4182e40046942f5697fd9b49373c23b98ea63f01eac647bc6e2c80d3f164
SHA512

7e66641160819fd0af30904c249e6c3ca6be36fa2b6c3ae95357be18f2df4a58183f4dc72aa24697304bac228d29d97e0324e952865f1dc3d631c0a6f1db8691
SSDEEP

3072:XMMxPJ4PvXGu6jpdqB1yz5SCsu2oh40kv3VucVE9:XMMxPJ4Puu8si5Fsu6vFuD

Score

N/A

Malware Config

Signatures

Files

689b4182e40046942f5697fd9b49373c23b98ea63f01eac647bc6e2c80d3f164
.exe windows x86

e4c39f3647c155e73a4f4f22c3cc3844

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputA
EnumResourceTypesW
GenerateConsoleCtrlEvent
GetDiskFreeSpaceExA
SetVolumeLabelA
AssignProcessToJobObject
GetModuleHandleExW
TermsrvAppInstallMode
FindFirstFileA
CallNamedPipeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE