db235274e5625623cd66b6d40aac9cab49437f1619bc0b11f1c5a9a29e228749 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db235274e5625623cd66b6d40aac9cab49437f1619bc0b11f1c5a9a29e228749
Size

56KB
MD5

a3218965ca7c64a7fb960960ae2bb521
SHA1

71670b24dc4b7f3ea5313707b36f3c6fd7346154
SHA256

db235274e5625623cd66b6d40aac9cab49437f1619bc0b11f1c5a9a29e228749
SHA512

a9da6df993aa2a0f8e6b498157dbce1c94eafda10a0cbb76b49198a4dfdd7af179bf49fd26ea97b5b7c86d016838aea09cb06731a2bdeefde10b898d853ba0eb
SSDEEP

1536:dpoNkq6IxuTG42kzrnV0Qms6sOrrMPB9OUhMth:vkL6IxuTG42kneQmsCMPrOyMth

Score

N/A

Malware Config

Signatures

Files

db235274e5625623cd66b6d40aac9cab49437f1619bc0b11f1c5a9a29e228749
.exe windows x86

5c35b3195646f3b9f202b1ea8297be76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextVolumeW
ScrollConsoleScreenBufferW
GetCurrentThreadId
GetComPlusPackageInstallStatus
GlobalAlloc
NlsResetProcessLocale
CancelDeviceWakeupRequest
_lclose
SetConsoleWindowInfo
Thread32First

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE