4789f12e6c488d700e50232bde4736a0521780064cb8de40bf9cef86f628f192 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4789f12e6c488d700e50232bde4736a0521780064cb8de40bf9cef86f628f192
Size

119KB
MD5

278b39ba4ea6df8fc9aa219462f5845d
SHA1

c729c3f0d994f3577ad512f20d781ac9e72d17fb
SHA256

4789f12e6c488d700e50232bde4736a0521780064cb8de40bf9cef86f628f192
SHA512

22cfc6d11c1c6e9ebd0263246dd67b2014b88a0df7b01209e0f7204bc24392ae60771fa9259aaad9afb56bb0c143650ad76cdf0d4022813f9258cc464cb25c7a
SSDEEP

1536:4vUlWgvurw8vqt5SsQuZwHB1s9ksTMsOXtApg1P+9ZpjVrs2ryrd1vUQuqSSqK5S:drvurB45hCACsTfOdkIsHs2qxnC

Score

N/A

Malware Config

Signatures

Files

4789f12e6c488d700e50232bde4736a0521780064cb8de40bf9cef86f628f192
.exe windows x86

43e9d88c4b882528e3030bec6801e418

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameExW
SetConsoleNumberOfCommandsA
SetFileApisToOEM
CompareFileTime
HeapQueryInformation
GetProcessPriorityBoost
SetFileApisToOEM
EnumLanguageGroupLocalesA
EnumUILanguagesA
GetCommandLineW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE