129b96f327354adc0286041a62a588f213a377f40db11730292ee68b63d8c358 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

129b96f327354adc0286041a62a588f213a377f40db11730292ee68b63d8c358
Size

96KB
MD5

0f2ecdd2272564a1613201d883eda73a
SHA1

fd2a4419705c92be6509ac6301699291ff76c048
SHA256

129b96f327354adc0286041a62a588f213a377f40db11730292ee68b63d8c358
SHA512

32acbee7fd3e4399b603b319c85ab0719880a59f846f6d266ba472e49ce20350709d9d9e2a44ebac9ef9af28c5e46e7e155db95f7dc7cf14c3eea5bfc147983c
SSDEEP

1536:jGQPBJYYbujsw9Ym9hWJVXiMe62pjVrs2ryrd1vUQuqSuWnRrF4O5+n6J44K5H:jxPBxSsw9Ym9k8MN2Hs2qmRlixH

Score

N/A

Malware Config

Signatures

Files

129b96f327354adc0286041a62a588f213a377f40db11730292ee68b63d8c358
.exe windows x86

4378ae6a812c66922e19dec2fff91077

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstChangeNotificationW
FlushInstructionCache
SetConsoleOutputCP
EnumResourceNamesA
WaitForMultipleObjectsEx
DeactivateActCtx
PeekConsoleInputW
FindResourceW
LoadLibraryW
GetProcessDEPPolicy

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE