42bbdf343d808d7f40ac8358d33bcb3126152b85ce2ff7c89963eff50ccad811 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42bbdf343d808d7f40ac8358d33bcb3126152b85ce2ff7c89963eff50ccad811
Size

76KB
MD5

0549414c5c2131fbe3ce4470ce0d4da2
SHA1

148a1dcf3880975fd85d9011f3820154f33166f9
SHA256

42bbdf343d808d7f40ac8358d33bcb3126152b85ce2ff7c89963eff50ccad811
SHA512

4fadc612e53732bacac70397ee9f583dc73f45f8e78d491551c972cd37eafe37c83ad5339a070d263f529c9bae9be6358cf8c125f3b48b38505ba1e8745b9ffd
SSDEEP

1536:pDAtXz0EKKgmqBkSHfT7lRCdjEErxTWDTMqhGKYIZTET8x:96z08gNi+/rCdjBkMqhGKZTbx

Score

N/A

Malware Config

Signatures

Files

42bbdf343d808d7f40ac8358d33bcb3126152b85ce2ff7c89963eff50ccad811
.exe windows x86

6166b35bf6f4594a80a25b3844b35a8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleInputA
SetEvent
DeleteFiber
SetNamedPipeHandleState
SetConsoleInputExeNameA
EnumResourceLanguagesW
ReadConsoleOutputA
SetNamedPipeHandleState
GetNumaProcessorMap
RemoveLocalAlternateComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE