f1d4198337d86ac783b3996c3366ec4b838d3a63c98a9f7e41a4d3c890cb82d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1d4198337d86ac783b3996c3366ec4b838d3a63c98a9f7e41a4d3c890cb82d4
Size

92KB
MD5

9d872ca68b396544a8b4e3d03d47afae
SHA1

504b9a781ff3214911982b6548b9cfc2768eb41d
SHA256

f1d4198337d86ac783b3996c3366ec4b838d3a63c98a9f7e41a4d3c890cb82d4
SHA512

5387060e1b68729caab0a6cc24b44702622caecb46c6bc059c927138d03daf4cbdbe3b7d6b63c2ff7484b93551dd4bf144390f0b9b5c8169e23d6c6bf652e932
SSDEEP

1536:3U3OklezYqtfF0ZM6x/n6MdF+KVr1RjEErxTWDTMqhGKYIZTET8u5j65UlFWh8I5:kBYBRFWhvtRRjBkMqhGKZTbuwgWW

Score

N/A

Malware Config

Signatures

Files

f1d4198337d86ac783b3996c3366ec4b838d3a63c98a9f7e41a4d3c890cb82d4
.exe windows x86

e994bbc1d1dbd3e728bc8e792909d151

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
WTSGetActiveConsoleSessionId
Heap32ListFirst
FindFirstFileExA
WritePrivateProfileStringA
GetVDMCurrentDirectories
RaiseException
DeleteTimerQueueTimer
GenerateConsoleCtrlEvent
FindAtomW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 26KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE