f279befbf22f5bccc72ae2664f2c3892fa087c4f1f0ccb1fa685bbe5346258ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f279befbf22f5bccc72ae2664f2c3892fa087c4f1f0ccb1fa685bbe5346258ff
Size

91KB
MD5

28f596f450f1c19af29ba9c9cfc54cb6
SHA1

f1138ead1aec56a03ae0bc79145b8081814fd112
SHA256

f279befbf22f5bccc72ae2664f2c3892fa087c4f1f0ccb1fa685bbe5346258ff
SHA512

2f88c371f78a869ee1e0cfac4e54e4dc2a24c02ec75bbacf8162876d0c754abb63f2b00b34c43d0c94d474050006ace6eb8556f9d4754d3a4ba174695294606e
SSDEEP

1536:Q5T45+p4iiAxhSrt9mMhSJPdBCFOrQwzNc6etK:Q1wA6J9mMhgHCorQaNc6p

Score

N/A

Malware Config

Signatures

Files

f279befbf22f5bccc72ae2664f2c3892fa087c4f1f0ccb1fa685bbe5346258ff
.exe windows x86

d6751335e224c03f7c35191ef339b25e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
EnumSystemLocalesW
OpenFileMappingW
SetConsoleTitleW
CreateSocketHandle
DebugBreak
InterlockedCompareExchange
CompareStringA
GetConsoleFontInfo
LoadResource
CheckRemoteDebuggerPresent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE