64871f1cc1cad9df166ca681f684495505387a85858da63d5919f8e280c66e3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64871f1cc1cad9df166ca681f684495505387a85858da63d5919f8e280c66e3b
Size

65KB
MD5

0eea3d8dcdd0feadd773a2cb88b8c755
SHA1

fdc20fa4f962950dd90f61bf4091601e29a4f357
SHA256

64871f1cc1cad9df166ca681f684495505387a85858da63d5919f8e280c66e3b
SHA512

2a0ddf32d6a9dfc7b5776c24590d79302a0f4748640ae0c176c754ada6570787f4a8337459ecc47d8c5eefdc630eb78f100470391a0bc10a8ec9d26f0c3afa58
SSDEEP

1536:Cadadadada/sPjbqEqFtxvhwmrC6NTHGEhiAoc7IHvDStCtmW:CiiiiIaPuFtZhwmrPGExwGUN

Score

N/A

Malware Config

Signatures

Files

64871f1cc1cad9df166ca681f684495505387a85858da63d5919f8e280c66e3b
.exe windows x86

e1e3ecfda3c1fa94fece2fc0c4c33422

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleA
lstrcmpiW
SetVDMCurrentDirectories
GetACP
SwitchToThread
SetCommMask
DuplicateHandle
GetModuleFileNameW
ExpandEnvironmentStringsW
lstrlen
Thread32Next
GlobalCompact

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE