a32fee99edcb80cd6b1271e5bc9421335b60042e48482bc60d7b428f930f1e39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a32fee99edcb80cd6b1271e5bc9421335b60042e48482bc60d7b428f930f1e39
Size

71KB
MD5

5c9fb875e82ab10b6f6aa34320901886
SHA1

a4cfc43c05221c0c04fc017cb5bed5ece6f8194a
SHA256

a32fee99edcb80cd6b1271e5bc9421335b60042e48482bc60d7b428f930f1e39
SHA512

7c194143714684423c159b9a1e049bbfc478de4fc3f4a4f0f71173bf55ae3389d041952dfb198d6cd3011d5ccc7014812189f5a0be061425057d1b0b924d21ef
SSDEEP

1536:dExNsofg72ZVhEe6TvC9RPXaoAWfspeO96t767gm767amle0py7d7/:KTf5R0C9RkX9kc

Score

N/A

Malware Config

Signatures

Files

a32fee99edcb80cd6b1271e5bc9421335b60042e48482bc60d7b428f930f1e39
.exe windows x86

eb08853728b4198da5c10cdf4864ba27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryDosDeviceW
GetFileAttributesExW
ReadConsoleInputExW
PrivCopyFileExW
ReadConsoleOutputAttribute
GetAtomNameA
OutputDebugStringA
AddLocalAlternateComputerNameW
ReadFile
AddAtomA
HeapQueryInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE