949a817a42daee02e091b6651177b166dfce1387168075f56ae0e3e6e8dba5f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

949a817a42daee02e091b6651177b166dfce1387168075f56ae0e3e6e8dba5f1
Size

76KB
MD5

0a45dd96afa51389b553eef11d25c6f0
SHA1

e870a8a5184519bbf36705a7d6ac3bd7a37df189
SHA256

949a817a42daee02e091b6651177b166dfce1387168075f56ae0e3e6e8dba5f1
SHA512

8c44391bfc24fc7ef120021f04633c35ce3fd065f8021d7e3c38e142386348e4ffca6a2b05bb3c2ca421575f4f312abda9b232730ad098a453ce94f759621426
SSDEEP

1536:NGJz2BqZVvTbJsd/RUqXefVSNz6e0CrWwpK3eLpjVrs2ryrd1vUQuq6:kz2Bk9hsdCNSNz6e0jSHs2qo

Score

N/A

Malware Config

Signatures

Files

949a817a42daee02e091b6651177b166dfce1387168075f56ae0e3e6e8dba5f1
.exe windows x86

d9e0e4b2cbeb03627be82b094e439c87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleContext
CreateNamedPipeA
CreateDirectoryA
FileTimeToLocalFileTime
CancelIo
SetDefaultCommConfigW
GetExpandedNameA
DebugActiveProcessStop
LoadResource
SetConsoleTextAttribute
ExpungeConsoleCommandHistoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE