b4e1900508ca046bed003482e8af85c47f96393307167b0e42086041b95b92f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4e1900508ca046bed003482e8af85c47f96393307167b0e42086041b95b92f2
Size

184KB
MD5

10ebb80dc3e3427a2a171641fbbea730
SHA1

4356feeedd42f7776bea067a7f4eb7d32bb44ae9
SHA256

b4e1900508ca046bed003482e8af85c47f96393307167b0e42086041b95b92f2
SHA512

5a27f64679541abd92f66c4b0a3a0e67f3101f96d16b2998ff9fb4cb7bdfaea057157a4c46f6214c937bd66db5af34b44286fc09e8488e740a065322117ec4d2
SSDEEP

3072:xjYjvu3FAWevRF4lXFgHs2qmRlixXaKa0qMW2pVol3IFEyKwL8/eAi:2jvu3JepmHQ/wguJpVopIM/eH

Score

N/A

Malware Config

Signatures

Files

b4e1900508ca046bed003482e8af85c47f96393307167b0e42086041b95b92f2
.exe windows x86

d43fa988f9c51409a730327183471bdd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
GetCPInfoExA
GlobalSize
CreateProcessW
SetProcessWorkingSetSize
SetConsoleMode
Module32FirstW
lstrcpy
SetConsoleNumberOfCommandsW
EnumerateLocalComputerNamesW
TerminateJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE