947e026319ec4bc5a94fdeaf596f97465de7873d533a2f11806ac50d827a2288 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

947e026319ec4bc5a94fdeaf596f97465de7873d533a2f11806ac50d827a2288
Size

65KB
MD5

0e86939fafd687d1c5c90c932ffac67c
SHA1

798c830dcc34c91315b92dfba6092965b68162d6
SHA256

947e026319ec4bc5a94fdeaf596f97465de7873d533a2f11806ac50d827a2288
SHA512

9be329b64d4d981ae202d2b8c25f5b853c5d94dc00729b944d533042997615abf493934d907388b830ce4e0c3dbe1b3f1defd7b0e2bae484fb77f623e0466483
SSDEEP

1536:cpwhuNQnTIwFfl9Z9LzUC/lkwfhF3GuW/t:cpwD8IFuDwZMuKt

Score

N/A

Malware Config

Signatures

Files

947e026319ec4bc5a94fdeaf596f97465de7873d533a2f11806ac50d827a2288
.exe windows x86

c4894f16dafcb059e075711c6415d459

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingW
SetFileAttributesW
InitializeCriticalSection
GetProcessTimes
EnumDateFormatsExA
GetCommConfig
InitAtomTable
SuspendThread
GetTempPathW
ReadConsoleOutputCharacterA
HeapUsage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE