d794b99826fbd41891c06efffa91cfc401f43828f4115a6a357513db37651bd3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d794b99826fbd41891c06efffa91cfc401f43828f4115a6a357513db37651bd3
Size

119KB
MD5

ab89fdd128ef8b7ee15ef5ff833ae12c
SHA1

e8a93669ae359cd73514d929168a10c1cd0385b0
SHA256

d794b99826fbd41891c06efffa91cfc401f43828f4115a6a357513db37651bd3
SHA512

ff33e2358d6b6d6d78456caa00477f572d87dc537e04572ce4dbb9a6b22ea91e216053540e279477e96e6fa2bc8b95e108f56942b44eedcbd31ef22d7218f8d6
SSDEEP

1536:2p9HlpYsvjzm9AAkRicBAoGoqwJ8zGdSgh4OpjVrs2ryrd1vUQuqSSqK5tnCvv:2nHlpbzEPDqALlydyOHs2qxnC

Score

N/A

Malware Config

Signatures

Files

d794b99826fbd41891c06efffa91cfc401f43828f4115a6a357513db37651bd3
.exe windows x86

540151aca8132c25bf511a2378a7b5b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
lstrlenA
GetOverlappedResult
GetProcessHeaps
UnregisterConsoleIME
ContinueDebugEvent
FileTimeToDosDateTime
GetUserGeoID
HeapCompact
SetConsoleTextAttribute
TerminateThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE