49b39548cfd78fd41184e380f999b3a0cf294e4b9fa139f38f0daef418c74bdf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49b39548cfd78fd41184e380f999b3a0cf294e4b9fa139f38f0daef418c74bdf
Size

63KB
MD5

00a075bc780ce30ae73e32ae3cb5c8a9
SHA1

00ddf7b7b8925846e3f654cdc8c569e691e8e90a
SHA256

49b39548cfd78fd41184e380f999b3a0cf294e4b9fa139f38f0daef418c74bdf
SHA512

189ceb57af4b56a8131fa4b666458eb8cf920c113ae346be56f694a8205c47ce5df8b27a9929db37ca7cc23ecc40976e60ff688f398a29fb5f258e7c7201e9ff
SSDEEP

1536:4Qs7B8uNuNwzssO9ziHVR3H0CJnXirqmDOFhc7rN:4P7B8uN+fsO9ziHw3rqm2WfN

Score

N/A

Malware Config

Signatures

Files

49b39548cfd78fd41184e380f999b3a0cf294e4b9fa139f38f0daef418c74bdf
.exe windows x86

a37e174ac48f4988fa388f53e35364e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetWriteWatch
OpenMutexA
FormatMessageA
Module32Next
GetExpandedNameA
SetCPGlobal
FindNextFileA
GetConsoleInputWaitHandle
GetProcessHandleCount
SetConsoleFont
RtlCaptureContext
MultiByteToWideChar

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE