a025734dc10d29eda8abb0223141c52c5db215e5aab8c2eb22791452e87b767c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a025734dc10d29eda8abb0223141c52c5db215e5aab8c2eb22791452e87b767c
Size

91KB
MD5

304f3336cb4e41ebd73aed512f1f3d01
SHA1

039b5cf592261ebce877ce9aebb5f7c919a331ef
SHA256

a025734dc10d29eda8abb0223141c52c5db215e5aab8c2eb22791452e87b767c
SHA512

8fc306427824415879d8d520ef27192776e7d57865966a5f2c9914434f45cd21e20b08eef7fe21643b2907915855c9f87a41cc4816118b12bdc806a08f248c2d
SSDEEP

1536:0rZxrzD0Vov2eqC7K20ldzbKTRZKaR7Q+PjE4lL0jzqe87gzV:WD/5lP0HyZPbE4lIjzqeqgzV

Score

N/A

Malware Config

Signatures

Files

a025734dc10d29eda8abb0223141c52c5db215e5aab8c2eb22791452e87b767c
.exe windows x86

b115ad8db6007b9e6a3aa3c41e6486a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
SetTimerQueueTimer
ProcessIdToSessionId
CreateFileA
GetConsoleInputExeNameA
DebugActiveProcess
FindAtomA
Module32NextW
GlobalWire
GetTempPathA
GetCurrencyFormatW
FillConsoleOutputCharacterW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE