1141978093e4b337d42dacdc68db45ae93a95a47d96873b2d94fd33262d4015c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1141978093e4b337d42dacdc68db45ae93a95a47d96873b2d94fd33262d4015c
Size

76KB
MD5

837342094ccbff1c1b049767b7b26d91
SHA1

ebffc43756ad01502a54de843850511e1fd40439
SHA256

1141978093e4b337d42dacdc68db45ae93a95a47d96873b2d94fd33262d4015c
SHA512

9c97df7a66cfaec91e4751af8deb8b7ee9f401b195b79eae082c3d326f4093af79c86e092ae7f9f4389a4b04f5e82725f13725e3ad70562be7364d242154c793
SSDEEP

1536:shhhhhxAjR0QbjU/qQW4O1bjouJ2kOxVXZpjVrs2ryrd1vUQuq6:lbjDHbjnnOxVXZHs2qo

Score

N/A

Malware Config

Signatures

Files

1141978093e4b337d42dacdc68db45ae93a95a47d96873b2d94fd33262d4015c
.exe windows x86

c87bf006fcccc634d129823def36a3ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFirmwareEnvironmentVariableA
SetFileApisToOEM
LZSeek
GetModuleFileNameW
lstrcatA
WriteProfileSectionA
SetCommBreak
lstrcpyn
GetProcessAffinityMask
RemoveLocalAlternateComputerNameW
CreateMailslotW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE