496c10bb74762cf7e8c18e77f7401d000b896f54494454157e4b678a0ae18a57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

496c10bb74762cf7e8c18e77f7401d000b896f54494454157e4b678a0ae18a57
Size

178KB
MD5

0db28023715f5125055930a91483cda0
SHA1

df62e9914dfb01332e8c9535980827abe6f68cbd
SHA256

496c10bb74762cf7e8c18e77f7401d000b896f54494454157e4b678a0ae18a57
SHA512

742449a6ee288c087d4ad4ec1abd73f209931dbb6e8ba72a443ab71baf9d8210a273c9701c3d01bab27716937bc829319f65d05a328b39946528d0adfdc6a3ea
SSDEEP

3072:KKD598gAkmuSTPxagp8dWhRpBTvHs2qmRlixXaKa0qMW2pVol3IFEyKwL8/eV:h19Ekmu6xzpeWhRXf/wguJpVopIM/eV

Score

N/A

Malware Config

Signatures

Files

496c10bb74762cf7e8c18e77f7401d000b896f54494454157e4b678a0ae18a57
.exe windows x86

e1349fd6850f9e04c0b57f3d185f54e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32FirstW
GetConsoleCommandHistoryLengthW
GetEnvironmentVariableW
TlsFree
GetConsoleKeyboardLayoutNameW
lstrlenA
lstrcpyA
SetFileAttributesW
GetShortPathNameA
GetFirmwareEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE