4889323dbd3337fa80229e3a596b3d113faf7a802dad46cb0a9aac800a43f8a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4889323dbd3337fa80229e3a596b3d113faf7a802dad46cb0a9aac800a43f8a4
Size

111KB
MD5

5cb0d5ca450a45266ef8e50fffa889ac
SHA1

392ac73e0668004a80b028be50aee88f08a5d3a0
SHA256

4889323dbd3337fa80229e3a596b3d113faf7a802dad46cb0a9aac800a43f8a4
SHA512

1e66bb6fb1522aa17222098c1a10f4e2823df5f07db6d5efbaad761bdb753cfbadf99f12cbae4b3c503cdac83372f82728001c85621d097b76bd3e4267e69cef
SSDEEP

1536:XwHq00a0EXpkTyUi0+NWmJZnwWT7JSpuNvYPMlp6Bpaho3hWLi00fkuBSqoX:l009EX2eUH0JZwawuNvYdbh2MPW

Score

N/A

Malware Config

Signatures

Files

4889323dbd3337fa80229e3a596b3d113faf7a802dad46cb0a9aac800a43f8a4
.exe windows x86

e24c76df06e0c471b1a13163c1d0853c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateHandle
FreeEnvironmentStringsA
SetPriorityClass
GetModuleFileNameW
VDMOperationStarted
QueryInformationJobObject
LZStart
Module32First
WriteConsoleA
FindActCtxSectionStringW
GetSystemDefaultLCID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 97KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cduupqo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE