e1b3a716fa82b5719f749a60d57703ce93037e89aa8c54734e235431dc23d0d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1b3a716fa82b5719f749a60d57703ce93037e89aa8c54734e235431dc23d0d9
Size

63KB
MD5

2227ab207e195be76e21ab066b49be74
SHA1

84cfa58f52e616a70947ae8500b3d97bfc257228
SHA256

e1b3a716fa82b5719f749a60d57703ce93037e89aa8c54734e235431dc23d0d9
SHA512

49c688d6d77b5284e5c0c8f7134233b135f273a66dbd59dd837ae132f2a6e445bbb9fc9488beffb5d709ebe003e664e7ea6c793d16fbbddcb66c65c2e3c104d3
SSDEEP

1536:6me//zkGopN/ngWKAT9ic2Dn+Xb5u9qcHy1JLd2RGZScf3LeQFGVIU4LOJch:MnopN/0c2aNu9YplSeHUVp4aOh

Score

N/A

Malware Config

Signatures

Files

e1b3a716fa82b5719f749a60d57703ce93037e89aa8c54734e235431dc23d0d9
.exe windows x86

3477d1d630b31aa84d72a190e08f89b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteTimerQueue
lstrcpynA
Thread32First
CreateFiber
GlobalMemoryStatus
MultiByteToWideChar
GetLargestConsoleWindowSize
InterlockedIncrement
VirtualProtect
GetSystemDefaultUILanguage
GlobalDeleteAtom

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE