cad40bff4e5dcb6454d85fd3f489d9a5a51ef8b57891683f2fa31858caf4024a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cad40bff4e5dcb6454d85fd3f489d9a5a51ef8b57891683f2fa31858caf4024a
Size

67KB
MD5

bbda5947b42da0a15655b37a9de7c7be
SHA1

d42a805772806f17b2b655560a1bf72a5eb60b70
SHA256

cad40bff4e5dcb6454d85fd3f489d9a5a51ef8b57891683f2fa31858caf4024a
SHA512

1f030210d0b3080a9f4636e835f59290d6872446f3a2bd3cf74dbee6c4d7c36a4100e6a32da7c4813b28300d4f36daec5f16d0490760c8db9510fb31affb7791
SSDEEP

1536:CopFa5g4K49j1hP3aaB/Gia9CEgS1chktRQJloadjLK:CopFDQ9j1VJB/+8S3tRQJlf3K

Score

N/A

Malware Config

Signatures

Files

cad40bff4e5dcb6454d85fd3f489d9a5a51ef8b57891683f2fa31858caf4024a
.exe windows x86

ce0e4525274f3fddf21b10ad8b3ed082

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConvertFiberToThread
GetConsoleCommandHistoryW
GetModuleFileNameW
GetOEMCP
WriteConsoleOutputW
CreateDirectoryExA
GetConsoleFontSize
VerSetConditionMask
CreateFiberEx
GetProcessTimes
lstrcmp

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE