4c91cac4d29d609bc766a5277b9c6599e511c141ed7800925b5c0ecf67b2ce21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c91cac4d29d609bc766a5277b9c6599e511c141ed7800925b5c0ecf67b2ce21
Size

63KB
MD5

0886e62e416ca8c4eb5c7b5b30b00946
SHA1

6cc6adff3ac98335fc10c71f150d002b9b99e391
SHA256

4c91cac4d29d609bc766a5277b9c6599e511c141ed7800925b5c0ecf67b2ce21
SHA512

557a2be1960e9ceda0c407d29af9de2424ae976783289378d71802a509583c838d80a14b67bbf8a191f3906f2432a0b3c3ea51c02fb781762d1db8d7c1ce96cc
SSDEEP

1536:wOOcBG7HfOym0WpcyZi5anXHLnx2wvcJcCoBajfQ70:wOOvsJcyZiGHl2CWcQ7C0

Score

N/A

Malware Config

Signatures

Files

4c91cac4d29d609bc766a5277b9c6599e511c141ed7800925b5c0ecf67b2ce21
.exe windows x86

8c0e4b33e9f5633824c177dc3472a1c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingW
GetConsoleCommandHistoryLengthA
lstrcpy
SetThreadAffinityMask
ChangeTimerQueueTimer
FindNextVolumeW
EnumSystemLanguageGroupsA
EnumResourceNamesW
RegisterConsoleVDM
RegisterConsoleIME

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE