b1fed018c9a94338f320138ed6a66f7433ebc546ce81e9f470f05e054e3b44cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1fed018c9a94338f320138ed6a66f7433ebc546ce81e9f470f05e054e3b44cf
Size

83KB
MD5

056971eb7d4f4c2e8f6368c0e7617142
SHA1

44ed3e8bd884b13fa0ab20fc0977811fe9af1556
SHA256

b1fed018c9a94338f320138ed6a66f7433ebc546ce81e9f470f05e054e3b44cf
SHA512

78ec794295686993143c3a03c665bd5752ec715032c4ea49a735325fd591a9a8ee692bdb24e8cb75b61e279895e9769668585ff69d4fd296ddf575be7e841768
SSDEEP

1536:Rb0rNkKSDXQmbRTx7iyMnQ7HEasIfoyRuMVpNf1BnJNP7dcctu:RYrSKS7QmvmyOQLEa9FIcpNf1Njdi

Score

N/A

Malware Config

Signatures

Files

b1fed018c9a94338f320138ed6a66f7433ebc546ce81e9f470f05e054e3b44cf
.exe windows x86

4579e9aab94d8ceaceeec1e1122aa62d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnfix
WinExec
SetEnvironmentVariableA
IsValidLanguageGroup
GetNextVDMCommand
MoveFileWithProgressW
SetUnhandledExceptionFilter
GetQueuedCompletionStatus
SetTimeZoneInformation
ReadConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE