f9534b542ab4f3d9198fd946e856e3dc0b588123516d5fe6e0b3d010849f4700 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9534b542ab4f3d9198fd946e856e3dc0b588123516d5fe6e0b3d010849f4700
Size

62KB
MD5

05a2f57af892d0a13cac481a89342948
SHA1

4cb659ea7ee335a8c5c318fabf9d3428fe07b524
SHA256

f9534b542ab4f3d9198fd946e856e3dc0b588123516d5fe6e0b3d010849f4700
SHA512

3503563f0f860ed684b5313f29f2eafa3850c66fbdcf124b124aad6f5e5d12f36af43737c9261bb180142a62911acbce767a352217e9ced41c9d2cc5d6aa8711
SSDEEP

1536:AWYY3vqAyR+8GSQdIZo9zMvHnGGAP2NopoWddQEGp:d3iXREdIZomHGlPboL

Score

N/A

Malware Config

Signatures

Files

f9534b542ab4f3d9198fd946e856e3dc0b588123516d5fe6e0b3d010849f4700
.exe windows x86

a33f06fc1c2649e37462ac3819164a9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressA
SetFirmwareEnvironmentVariableA
RtlMoveMemory
GetConsoleDisplayMode
CreateFileW
GetConsoleInputWaitHandle
GetLongPathNameA
OpenConsoleW
Beep
LZCopy
FindVolumeMountPointClose

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE