23d8e54609da8d9681744f65c9be674af7016059077e043d1ebfae2a5aca3ebf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23d8e54609da8d9681744f65c9be674af7016059077e043d1ebfae2a5aca3ebf
Size

94KB
MD5

2bb158195df709fbf6b2521fce29072c
SHA1

efaee43f683a788e63bebaa53fdefcd775ddd951
SHA256

23d8e54609da8d9681744f65c9be674af7016059077e043d1ebfae2a5aca3ebf
SHA512

7bde68487e127a99477490b9d72a522ba8248bc5c07f2aa810e15f9d9e0b0391361c6d01da70bbd8eedfa9677c82ca6a5b79997fd36de9b17ee03e8b255c1954
SSDEEP

1536:SI0XaRsKKTsaYzebynAj4/U9ItiGOAc8YaEJwZK4/83ZoMOALLbwTc:SBKRGYSGnAjYUFGOAhZEXtpxLLbCc

Score

N/A

Malware Config

Signatures

Files

23d8e54609da8d9681744f65c9be674af7016059077e043d1ebfae2a5aca3ebf
.exe windows x86

2bc06cb1c589dce97b6f9f876f251a29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadExecutionState
FreeLibraryAndExitThread
WriteProcessMemory
WaitCommEvent
SwitchToFiber
MapUserPhysicalPages
ReadConsoleW
CallNamedPipeA
HeapReAlloc
GetPrivateProfileSectionNamesA
GetPrivateProfileStructA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE