4adee68abb52f70a2f1196930368992794418026ea313fca3a259d4c5ca35ce9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4adee68abb52f70a2f1196930368992794418026ea313fca3a259d4c5ca35ce9
Size

76KB
MD5

07e83916e61ba1e20bc941eb519e67e5
SHA1

56b1438e90b8daae378916c528990c943e9ab980
SHA256

4adee68abb52f70a2f1196930368992794418026ea313fca3a259d4c5ca35ce9
SHA512

d296c40dca2837eaa8bc18a3c33ce0b49e22a3a151dd676208932ddc411ac63b598de059d2fab4a6f82b4489263aaee6d5ab2e196450b0a36c808ea925495c03
SSDEEP

1536:1DpHeL3zjU7lRZLskwQlJlqVvey28ppuudbojEErxTWDTMqhGKYIZTET8x:18L3zgl/YkhSeAps+ojBkMqhGKZTbx

Score

N/A

Malware Config

Signatures

Files

4adee68abb52f70a2f1196930368992794418026ea313fca3a259d4c5ca35ce9
.exe windows x86

5d6f8880954fb9936aae80f693633fd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionGuid
AllocConsole
LCMapStringW
SetComputerNameExA
DuplicateConsoleHandle
ReadProcessMemory
GetThreadIOPendingFlag
PostQueuedCompletionStatus
HeapSetInformation
WriteConsoleOutputW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE