00b305e36b8857d47005c0ed1fdab1d2a4781460be8d0455881293bfaad0d34c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00b305e36b8857d47005c0ed1fdab1d2a4781460be8d0455881293bfaad0d34c
Size

56KB
MD5

07e497418d4f859593cef49100ebc34c
SHA1

76e03610129e4a697bdad91f4793162d5686f4ae
SHA256

00b305e36b8857d47005c0ed1fdab1d2a4781460be8d0455881293bfaad0d34c
SHA512

3fbe6fc9f0ca08468f9a96662ae627725c242cd7582d6bb51740a4fa245cefbb8391393b6353d0b431cbabf66aea6bf12e353b2aafdd3424b9a5e86cd384d160
SSDEEP

768:enF4EBqZh6KiIvm+H557EEg+3VHmRNXz3BbF5WMSCszYPTgpCYcRlF5Aj0l8vGMH:gFHJwttgtXr35W2szYsIaGM3qljnfG

Score

N/A

Malware Config

Signatures

Files

00b305e36b8857d47005c0ed1fdab1d2a4781460be8d0455881293bfaad0d34c
.exe windows x86

8b1156635fd767f455a185c6e1ffd6df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
AddLocalAlternateComputerNameW
GetConsoleAliasW
GetHandleInformation
VDMConsoleOperation
QueryPerformanceCounter
GetNlsSectionName
CreateJobObjectA
LocalReAlloc
FindAtomW
ResetWriteWatch

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE