1b895318a415568d9d121ea6ad7a7c5336088f6d4592a9e5cb7e7854b587ae73 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b895318a415568d9d121ea6ad7a7c5336088f6d4592a9e5cb7e7854b587ae73
Size

119KB
MD5

b2a6efbf8a498bcdc363a2a3ee052536
SHA1

42f88040b930db6a42bdfdea451bd1a9e922a8ea
SHA256

1b895318a415568d9d121ea6ad7a7c5336088f6d4592a9e5cb7e7854b587ae73
SHA512

af5ae912a5c96f6424e2693a0c5edcabaa2cbbfce75206526282c5b736517054dc55fed8354b5fa34a5b60568b56c75aef9044d236c923f08d12f75f3547d910
SSDEEP

1536:1mRpf3IpuVzbrrZAgefBmdenOMJYUtZphpjVrs2ryrd1vUQuqSSqK5tnCvv:1CNYpuV7FAgePnZtZphHs2qxnC

Score

N/A

Malware Config

Signatures

Files

1b895318a415568d9d121ea6ad7a7c5336088f6d4592a9e5cb7e7854b587ae73
.exe windows x86

95e496aac8553418b4e08cd33ed35215

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetDefaultCommConfigW
TerminateProcess
IsProcessInJob
ReadConsoleW
DeleteCriticalSection
CallNamedPipeA
GlobalUnlock
HeapQueryInformation
TerminateThread
VDMOperationStarted
GetFirmwareEnvironmentVariableW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE