1f5b9a24f4c21546e130ba76f960cb211a3d738fb668e0aa6360d669575b32d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f5b9a24f4c21546e130ba76f960cb211a3d738fb668e0aa6360d669575b32d0
Size

63KB
MD5

0ca1bf7142744678744672d6f38b26fa
SHA1

b7b88c3a53daae3a3a6676d4a6898df8b7bd5f4b
SHA256

1f5b9a24f4c21546e130ba76f960cb211a3d738fb668e0aa6360d669575b32d0
SHA512

850c7b731130ed07107e979577931009163e2466da4e8c41852d0724ab13eb2cac624316ea1cef93f75d8eb80412d5e5c43b803442ff845473363619acc11411
SSDEEP

1536:ocVB/BbJLSHrBqVfGgzrVXImTPS9jZDvCwbZu+5BU3EZV:nBZbJ9ZNzxXv7QjZDl83u

Score

N/A

Malware Config

Signatures

Files

1f5b9a24f4c21546e130ba76f960cb211a3d738fb668e0aa6360d669575b32d0
.exe windows x86

dc2017abaee837909eda4995f0590270

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProfileStringW
GetWriteWatch
QueryMemoryResourceNotification
DebugActiveProcessStop
SetConsoleInputExeNameA
SetConsoleMode
CreateThread
DisableThreadLibraryCalls
InitializeSListHead
TransactNamedPipe

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE