12ccae0a59ec2196fffb1b2ddbb9ac8d73a88b61b7f1688d2bbe6889ee66a6bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12ccae0a59ec2196fffb1b2ddbb9ac8d73a88b61b7f1688d2bbe6889ee66a6bb
Size

86KB
MD5

a276254e2d9bb206c1dc708be894aa4c
SHA1

aeb1d15853daa5974c0defacdcc2de0233fc6ea4
SHA256

12ccae0a59ec2196fffb1b2ddbb9ac8d73a88b61b7f1688d2bbe6889ee66a6bb
SHA512

b2adc6051f4dfaed9a5da75b308feb0d043e8e651e3fcbece4e059b8c765f334099d10e1e0e9bc112e4c27bb7dfbe0f33d5dfdacc2c568c0348c7669074658dc
SSDEEP

1536:vfV6JDFDqSPaV8us6DYxsYi9Ln/jPv/j+3DHjIoAasF09Z2MLmZiNf1BnJNP7dcQ:vKD5PlxsY4L/jPv/j+3vAfwZnNf1Njd1

Score

N/A

Malware Config

Signatures

Files

12ccae0a59ec2196fffb1b2ddbb9ac8d73a88b61b7f1688d2bbe6889ee66a6bb
.exe windows x86

843c7701794bb7197c9ba66aa0704b39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlCaptureContext
QueryWin31IniFilesMappedToRegistry
BuildCommDCBAndTimeoutsW
BackupWrite
ReadFileEx
SuspendThread
CopyFileW
TlsGetValue
PeekConsoleInputA
GetConsoleNlsMode
FindActCtxSectionStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE