482bbcb8dadd78e328a6b709ce361bb64fe86b297943df221a82ceadccf12085 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

482bbcb8dadd78e328a6b709ce361bb64fe86b297943df221a82ceadccf12085
Size

119KB
MD5

8700948970b1ff3591bece1331853bec
SHA1

01fa720e4a8bacfa409f0dd77bbce590645f5a47
SHA256

482bbcb8dadd78e328a6b709ce361bb64fe86b297943df221a82ceadccf12085
SHA512

09bddba5821b48c6d960a7c628afb5af86d6e74b0610370fe07829f4b7570d260b37eeaa3863d8ec750039819030c0cfd8e14605762f46eb399b34c6b9807292
SSDEEP

1536:jWMkkxMkLgxWFk2vFocNuuoETQIJ+aIJ7pWPCeoWpjVrs2ryrd1vUQuqSSqK5tnU:E5kPGUFocNuur+FpgoWHs2qxnC

Score

N/A

Malware Config

Signatures

Files

482bbcb8dadd78e328a6b709ce361bb64fe86b297943df221a82ceadccf12085
.exe windows x86

4077a49d2d81518df53455b6f85c26c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyn
ScrollConsoleScreenBufferW
ValidateLocale
GetVolumePathNamesForVolumeNameA
QueryActCtxW
GetConsoleAliasExesA
GetMailslotInfo
SetFirmwareEnvironmentVariableW
OpenMutexA
CloseHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE