0862a10d72538b869ac265151f22481600258e6e70561175948be02c1fb95f12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0862a10d72538b869ac265151f22481600258e6e70561175948be02c1fb95f12
Size

119KB
MD5

1034d2402c400f9abf16bcef7c325e3b
SHA1

003ea10cb58e06016abccd4648d0d175b8aa6f55
SHA256

0862a10d72538b869ac265151f22481600258e6e70561175948be02c1fb95f12
SHA512

460e0b7904a67db471744623fae9a4cbd298fce76445e6694dc048b20cc7c2b36bca49c941f8891311b007b82ba11c7a8246d730ea8fdbe5953d1e111394522d
SSDEEP

1536:w9WJ0T5npDEHWaIcrrWmDKxItNVWLBIV6upjVrs2ryrd1vUQuqSSqK5tnCvv:w9Wa5taZrW9xA4W5Hs2qxnC

Score

N/A

Malware Config

Signatures

Files

0862a10d72538b869ac265151f22481600258e6e70561175948be02c1fb95f12
.exe windows x86

f7254c82f7e9886b1186c89de1dcf7b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVDMCurrentDirectories
GetNumberOfConsoleInputEvents
MoveFileExA
EnumerateLocalComputerNamesW
RtlMoveMemory
GetNumberFormatW
GetConsoleAliasW
ReadFileScatter
LockFileEx
WriteConsoleOutputCharacterW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE