b47cd85b541c5552003f00324557635f3667c6d3841e2813b710e04d3d380858 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b47cd85b541c5552003f00324557635f3667c6d3841e2813b710e04d3d380858
Size

66KB
MD5

9cda8fbeffe6b7af7f66b227b003f629
SHA1

495e9fc631a789f8041adc5beadc25225b7deb0d
SHA256

b47cd85b541c5552003f00324557635f3667c6d3841e2813b710e04d3d380858
SHA512

69380440563c80c5bfa2f54863de334f37f60bf82c61b01d1fd36f8aa4f832e20af6e25032f1ac9893983ba7004a43bac4a71275598d13b2a49464ce22a1f242
SSDEEP

1536:NNOKjHqqmNZgMvVQubpKeDlvY94tWuKjng9CIXD6cA3qJxxVfBd:XOKuqmbTvVtpKuvFW+a3G1fL

Score

N/A

Malware Config

Signatures

Files

b47cd85b541c5552003f00324557635f3667c6d3841e2813b710e04d3d380858
.exe windows x86

3014de3c3d10800f6ee49030fa88356c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
GetFullPathNameA
GetTickCount
UnlockFile
LockFile
GetNamedPipeHandleStateW
FileTimeToSystemTime
Sleep
EnumLanguageGroupLocalesW
PrivCopyFileExW
ReadProcessMemory
GetCompressedFileSizeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE