f4b5c2995f4ea53bd0632290504b8f4e513b3c3664aa0265f3f9f51caedf0429 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4b5c2995f4ea53bd0632290504b8f4e513b3c3664aa0265f3f9f51caedf0429
Size

71KB
MD5

0c6283f7620077860802cc689e34ba9e
SHA1

9157b90ee3de96a542033f65a599e0513def0784
SHA256

f4b5c2995f4ea53bd0632290504b8f4e513b3c3664aa0265f3f9f51caedf0429
SHA512

54184bfadd1e9972befacd2f9b0a9503fa62fb9a776f7b05d14ec9ea2f6e374900a774b0a7739473516c394ad80fbc32903f751a50681a82c62c9ea65aa59dfd
SSDEEP

1536:IkrjWvpEisUm2IpXfn1eWScJWOZGhb+GKvs41rUCf+sOBFwhCTlIOX6UgZy+d:jTbWb+bvs4+CGchRO+Znd

Score

N/A

Malware Config

Signatures

Files

f4b5c2995f4ea53bd0632290504b8f4e513b3c3664aa0265f3f9f51caedf0429
.exe windows x86

57a52ec20a5bdbeab42a5b04b849b113

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputVDMA
GetPrivateProfileStringW
IsWow64Process
HeapExtend
LocalLock
WritePrivateProfileSectionW
DebugBreakProcess
GetDriveTypeA
ReadConsoleInputExW
GetStdHandle
LockResource

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE