12aab7d653a409571aeb96050642b407869402e2fabe1330515b691520fa7a31 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12aab7d653a409571aeb96050642b407869402e2fabe1330515b691520fa7a31
Size

119KB
MD5

57a3c2ca94d25b0f07bed85139adec75
SHA1

ec12599b553f569d0c9166a8faaa6d62e588190d
SHA256

12aab7d653a409571aeb96050642b407869402e2fabe1330515b691520fa7a31
SHA512

316ad40f08d067002328f16bbcb6783aeabe517bdc5a238c9d5939d0cf055a14d02c97e9b828c803178c9181a5ad9497f07e4e1f135e157a828d8766d857b06f
SSDEEP

1536:ouEg4ZEvNfwlNN6xZzyemFPRWSGvURiGpjVrs2ryrd1vUQuqSSqK5tnCvv:h5wlHOxy3WVhGHs2qxnC

Score

N/A

Malware Config

Signatures

Files

12aab7d653a409571aeb96050642b407869402e2fabe1330515b691520fa7a31
.exe windows x86

00f27502165e07ec143ed57508163ec0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryA
GetFileSizeEx
GetUserDefaultLCID
AddLocalAlternateComputerNameW
lstrcmpiA
GetCurrencyFormatW
GetTempPathW
CloseProfileUserMapping
MapViewOfFileEx
CallNamedPipeW
OpenJobObjectW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE