75e6f05faf3df390cd65cdc2ca567213653962849c1ebd65f535922c5dedf6c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75e6f05faf3df390cd65cdc2ca567213653962849c1ebd65f535922c5dedf6c7
Size

63KB
MD5

2e7f147fc7b458319a05bd4911fdb5da
SHA1

4716b8377124e0c3e8a24ddc4a13317cd14882e1
SHA256

75e6f05faf3df390cd65cdc2ca567213653962849c1ebd65f535922c5dedf6c7
SHA512

56bd4be384a5666f7ff1ec8ac2939305557e4a7c06d28e6c73477458c0201da109c11aaee120d070297b6d73aaea4bba13b25bd4d98bbe165202a685c1ed3a4b
SSDEEP

1536:sOnc5TGdwCoqsBQcq8hGCGgQte7DFPUjUeYB7uBVVe:sAFvojP1sCGZsfoTYBwe

Score

N/A

Malware Config

Signatures

Files

75e6f05faf3df390cd65cdc2ca567213653962849c1ebd65f535922c5dedf6c7
.exe windows x86

af094e67b865777689e24e7614dc352f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DefineDosDeviceW
CreateProcessA
UnregisterConsoleIME
RegisterWowBaseHandlers
lstrcpynW
ChangeTimerQueueTimer
GetStringTypeA
LocalLock
UnregisterWait
_lopen
GetConsoleAliasesW
GetTapePosition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE