ca1e67c76b8c29ebfdacd43b0592247a9d3301da354076213677aee283a4101a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca1e67c76b8c29ebfdacd43b0592247a9d3301da354076213677aee283a4101a
Size

119KB
MD5

384edb22ec5f65db3717ee5995b602d4
SHA1

2e3e808671f0bed599b0d47b6d31ec542ffa0344
SHA256

ca1e67c76b8c29ebfdacd43b0592247a9d3301da354076213677aee283a4101a
SHA512

98bf28ccf1d3ee7ed3147ee3c9e45280d900ebe12775c42f21b8e9b656cdcca8f0080b62f4b1ae28584dba05a0977f0ef9bf50e629170735ef182a2ae1f7fc96
SSDEEP

1536:krbgMijJYY8rDlRYOuAaYu25fGE3fy/QFaPpjVrs2ryrd1vUQuqSSqK5tnCvv:k/g7tQ17uB7QFaPHs2qxnC

Score

N/A

Malware Config

Signatures

Files

ca1e67c76b8c29ebfdacd43b0592247a9d3301da354076213677aee283a4101a
.exe windows x86

3083b42e775a8f8ea05dd7e7abb27cb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFiber
ReadConsoleOutputW
AttachConsole
GetConsoleCursorMode
DecodePointer
VirtualLock
SetMessageWaitingIndicator
NlsGetCacheUpdateCount
HeapQueryTagW
SetPriorityClass
CompareStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE