fff1949e881d2a29043e075781b1f42e5a880d7442edbd7712688706155591f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fff1949e881d2a29043e075781b1f42e5a880d7442edbd7712688706155591f8
Size

58KB
MD5

484d3ef78e0a24b8cb523a0ab504c9d1
SHA1

199713ddd0c6c98271d7e6de5cb6686f0593f18d
SHA256

fff1949e881d2a29043e075781b1f42e5a880d7442edbd7712688706155591f8
SHA512

43e7d9da01c8f34c3f10071f0879feb3ef2f504d40b10286a640f46432d65c7db1766a4054d050e5c033a51caec62dec56bc0e11bb6a83800afa3728363abfa6
SSDEEP

1536:63rLtuTkcjTQidV5XzkcWkOvIYxX/FiBXFjoAiLtRc6pZ8E:qIp4IYx9iZ+BCQN

Score

N/A

Malware Config

Signatures

Files

fff1949e881d2a29043e075781b1f42e5a880d7442edbd7712688706155591f8
.exe windows x86

af2eeddf82ded87486746f1a6866a970

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugSetProcessKillOnExit
GetThreadContext
GetNumberOfConsoleInputEvents
SetEndOfFile
lstrlen
GetDateFormatW
RemoveLocalAlternateComputerNameW
FindFirstVolumeW
GetVersion
QueryDosDeviceW
CreateProcessInternalA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE