1c38b7a3562227e5d71ecf5186e8af57cff13256710de61417f17110e128c276 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c38b7a3562227e5d71ecf5186e8af57cff13256710de61417f17110e128c276
Size

80KB
MD5

237b22b23569f6c88572578e76050a49
SHA1

4ff366f6c6ed5c4b7bad0e71830987159771ca7b
SHA256

1c38b7a3562227e5d71ecf5186e8af57cff13256710de61417f17110e128c276
SHA512

89ac1a99e229236a9c01a4dd06e0b30ee46225a4fb287ed660ee19767561f16de72b4c9ad8db05e3553beb7bd11bc328774a6b4eff8b3d6634bce821db180a7f
SSDEEP

1536:Xx3L83392in6cxQH3eLFu5IEqV4dvSf/xZwBeeRlZ0ddL82hW8fPL:h3aEi6cxQH045IjLf/wnnm8vYL

Score

N/A

Malware Config

Signatures

Files

1c38b7a3562227e5d71ecf5186e8af57cff13256710de61417f17110e128c276
.exe windows x86

9c413420d7e308fb07b2c03a8b20b152

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFiberEx
IsDBCSLeadByteEx
SetFilePointerEx
QueryActCtxW
DeleteFileW
WaitForDebugEvent
GlobalUnlock
QueryInformationJobObject
GetDefaultCommConfigW
EnumSystemLocalesA
ResetWriteWatch

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE