f69c4d7e408ffcde97a6df8e4c354c94c41924cff59c7683b8a3751dc171803b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f69c4d7e408ffcde97a6df8e4c354c94c41924cff59c7683b8a3751dc171803b
Size

63KB
MD5

0e8a3646c5ac9ca96472fb1ff1162bd1
SHA1

49b742ba1018758ad81eb6c0939dcb85a741a8c6
SHA256

f69c4d7e408ffcde97a6df8e4c354c94c41924cff59c7683b8a3751dc171803b
SHA512

2eb2028db06f56736dcb1716d1274fd132b5b775a3ec34103275580b3d4568829e3dacf58064637e7c87b81c2dfb611f7fa7b5d087e19a015c04b1e7b95f4d39
SSDEEP

1536:Eku8xfY3CSc3069MqwxcS3cuS717t0c0VPFm+MwtPzlAfA+GJnMY2jXY4/FT1SIe:hu252w0E1Aj34xJDs

Score

N/A

Malware Config

Signatures

Files

f69c4d7e408ffcde97a6df8e4c354c94c41924cff59c7683b8a3751dc171803b
.exe windows x86

6be456896544df9eea4c12d20902a05b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessAffinityMask
GetModuleHandleW
WritePrivateProfileSectionA
InitializeCriticalSection
FindFirstChangeNotificationA
AssignProcessToJobObject
EnumCalendarInfoExW
WriteConsoleInputA
Process32NextW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE