c24161e605d166387137557fa419fe095e7daa5ce6438f76cec75e963170d715 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c24161e605d166387137557fa419fe095e7daa5ce6438f76cec75e963170d715
Size

119KB
MD5

841391449b02daedeec9c86c1d0a05f5
SHA1

91f149b442a70f8ba85b089ef2ee1550043ad2a6
SHA256

c24161e605d166387137557fa419fe095e7daa5ce6438f76cec75e963170d715
SHA512

b58c2485830176a33ab1ccad29256aa8e224be93d001555072461642f80f25e0ac1914b8eaa91ee7827e8735fc57556f0ce96ea8792bb6f54ae83231ddb5d682
SSDEEP

1536:3SLDEAZv/gaV+Jwrdb7luTiMkkCpjVrs2ryrd1vUQuqSSqK5tnCvv:3AZvNVPvlEIHs2qxnC

Score

N/A

Malware Config

Signatures

Files

c24161e605d166387137557fa419fe095e7daa5ce6438f76cec75e963170d715
.exe windows x86

2e1d8ed4e0f4574b162e2dcd286f884b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddRefActCtx
DebugActiveProcess
GetCPFileNameFromRegistry
lstrcpyn
GetPrivateProfileSectionNamesA
ClearCommError
Beep
GetLocaleInfoW
RtlZeroMemory
InterlockedExchangeAdd
GetConsoleScreenBufferInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE