ba629ad6e5b1d678eb5952eb912049a29046993b7dad897a15fc1d54767f420f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba629ad6e5b1d678eb5952eb912049a29046993b7dad897a15fc1d54767f420f
Size

91KB
MD5

8b3778a221f857cb6385db026b842302
SHA1

5d00ed50d7765b799c4ac15a17a932de8f0ddce0
SHA256

ba629ad6e5b1d678eb5952eb912049a29046993b7dad897a15fc1d54767f420f
SHA512

de3bd6c5332accb8047ef8745d7e8aeb6209aaa3b120870670b798ec5c2cc35a9df8bcef1b82a30d70241c5738ae59415f991c8843ee2c0af7d92e3da3e77a22
SSDEEP

1536:L1kZF0qAcF2lS0EThHAxtAfFvJGU6ad14SE1HWrYnLqeU:L1kZFkrEctAfPGxad14SE1HWr+XU

Score

N/A

Malware Config

Signatures

Files

ba629ad6e5b1d678eb5952eb912049a29046993b7dad897a15fc1d54767f420f
.exe windows x86

0e863b35edcb12c7409a0a2321f3f787

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessWorkingSetSize
GetLargestConsoleWindowSize
GetHandleContext
FillConsoleOutputCharacterA
FindNextVolumeA
VerLanguageNameW
IsValidCodePage
GetCommState
OpenJobObjectA
DeleteVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE