fb1f04d7c4d86461106e7b2f03427da4e95c6c237586ed781014b270c6759afc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb1f04d7c4d86461106e7b2f03427da4e95c6c237586ed781014b270c6759afc
Size

86KB
MD5

f5b8dedebfe82c05d022c2f2c475d949
SHA1

d39e42ba5029e094975c4a416cb1c2320be4f775
SHA256

fb1f04d7c4d86461106e7b2f03427da4e95c6c237586ed781014b270c6759afc
SHA512

171c0d8da7935a2517ea976bbb09eaceed828fa3ec4aeadad516e615f08b896199df46284bdf301ac295c2a40f654c4a99123cd15b9c9c2166a085a3b50989f0
SSDEEP

1536:CVP2xRET39PIRMfA2a7sjMq//4MF24Zxw7wFMywodAyjNf1BnJNP7dcf7T61s5V:4qRETN+M42myT/QMte75ywSAyjNf1Njb

Score

N/A

Malware Config

Signatures

Files

fb1f04d7c4d86461106e7b2f03427da4e95c6c237586ed781014b270c6759afc
.exe windows x86

3727c54a6a68ba819adb3de290994801

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryType
GetCurrentProcess
GlobalFree
IsBadCodePtr
CommConfigDialogW
FillConsoleOutputCharacterA
ReadConsoleOutputA
InterlockedExchange
PrivMoveFileIdentityW
BaseProcessInitPostImport

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE