4a54fb7da5e419be9f9bd2d05d5fcae4e065c5c7e450b8fc9006c767901db5b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a54fb7da5e419be9f9bd2d05d5fcae4e065c5c7e450b8fc9006c767901db5b2
Size

92KB
MD5

2cd35e1ccc929363a7f1c6ed3e01f0d6
SHA1

36bcae196993d9f150d3df6349eb503d47052ec8
SHA256

4a54fb7da5e419be9f9bd2d05d5fcae4e065c5c7e450b8fc9006c767901db5b2
SHA512

c9e3304ac2478c79427716dc5650a224dbbe0a2e7cb632999d34279c53229f60ba2c0dd949fd90e0f9857cb06cce0610e7ec21963637b7894c5fbf1abe376c7d
SSDEEP

1536:rp000wtswzOAdDlE/fPLu0mh9oy0oCtHLEHdMjEErxTWDTMqhGKYIZTET8u5j65b:PM8DlGiv91pCtHM2jBkMqhGKZTbuwgWW

Score

N/A

Malware Config

Signatures

Files

4a54fb7da5e419be9f9bd2d05d5fcae4e065c5c7e450b8fc9006c767901db5b2
.exe windows x86

67be00a8c77e01e6a75079ff4e64602c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpi
AllocConsole
AssignProcessToJobObject
FindVolumeMountPointClose
GetNumaNodeProcessorMask
SetVDMCurrentDirectories
GlobalFix
FindFirstFileExW
GlobalLock
CheckNameLegalDOS8Dot3W
SetConsoleTextAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 26KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE