0de40eb305741c4ac38202e7aa45b370503bffab0c6191b163d269e71b77b8ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0de40eb305741c4ac38202e7aa45b370503bffab0c6191b163d269e71b77b8ef
Size

63KB
MD5

31b412676f5e6abcb56ec6eb415e4c10
SHA1

258d38bbcb20faffc5f26079eaaeb9b5d32d21ce
SHA256

0de40eb305741c4ac38202e7aa45b370503bffab0c6191b163d269e71b77b8ef
SHA512

8ac7183f5cbe2eab322a6ce5fe9a22e2df8ba126d68da7610e778c75c1dc67cee88bed095612a8cbfb5c49f671817a84d8468d8ce761696c0db11d0dca387804
SSDEEP

768:nmpMUlIyEy1n7fmXQFtlUR9E8tF4CYZvTtIzn+2ztSxGk/zJq0Psdy5TjO9APQ28:nmZWQ9ULE8v4CYD+/to/ovOwsQEGGAf

Score

N/A

Malware Config

Signatures

Files

0de40eb305741c4ac38202e7aa45b370503bffab0c6191b163d269e71b77b8ef
.exe windows x86

1b43d8e7b4c5d579dc42e7b14e447dac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugActiveProcessStop
GetNumberFormatA
GetConsoleCommandHistoryW
VirtualQuery
WritePrivateProfileStructW
OpenThread
LZCloseFile
ReadDirectoryChangesW
SetConsoleCursor
AddConsoleAliasW
GetMailslotInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE