4024a0eb1ce2fad13cde71d93bea00cfc194839f1ad02d1f085277a643e43b0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4024a0eb1ce2fad13cde71d93bea00cfc194839f1ad02d1f085277a643e43b0a
Size

63KB
MD5

0d08ae50540c0c4a0409b5458dc9a68e
SHA1

8de8af10d05dd1bf292e3ccb93b869331eb38002
SHA256

4024a0eb1ce2fad13cde71d93bea00cfc194839f1ad02d1f085277a643e43b0a
SHA512

0943f015cf6c107df66d58726887c0fbfb2e6e7cea65267b07d52da76beed2221142f42521c15531f633b3dda5b6352efdbba7f1d6605fe99f4feccd6d34c722
SSDEEP

1536:FzBzT4kh+lx84WgNWir5xJzleGN0Haklf4eAGT/SEE4wvapUaBV7DqknfKjXS8rh:FJmlgpNYQiwbwBtY8x

Score

N/A

Malware Config

Signatures

Files

4024a0eb1ce2fad13cde71d93bea00cfc194839f1ad02d1f085277a643e43b0a
.exe windows x86

2ae22c56c4496a29efdc553da6cea698

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionNamesW
CancelTimerQueueTimer
CompareStringW
ReadConsoleW
lstrcmpiW
LoadModule
CreatePipe
CreateJobObjectW
GetConsoleKeyboardLayoutNameA
lstrcpynA
TlsGetValue

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE