94bbe522aae59983d4af67583bfe4d35900ca28bab1d4aeaf92d83f92068befa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94bbe522aae59983d4af67583bfe4d35900ca28bab1d4aeaf92d83f92068befa
Size

71KB
MD5

8e10e9388feec298ddde5acb25a15cbe
SHA1

d64b9889e47b0ec55ccf67476793f10dcd17484c
SHA256

94bbe522aae59983d4af67583bfe4d35900ca28bab1d4aeaf92d83f92068befa
SHA512

4c2428170d7caad8929e51cc2b605b3c0c082b115a82d397cec438ab3194685fae4b417e52c3546be66f5ed6c614237f3263ac3c3a40bd04fd2020dea6dae7ad
SSDEEP

1536:fOeU5hx/v9xyMAkvqTPQchWBwctrSPTmJYdZHCzVO+fxK4gT1OTkgLpaC+v9XT:e/vOvPerl298Q+pK5OTnVe

Score

N/A

Malware Config

Signatures

Files

94bbe522aae59983d4af67583bfe4d35900ca28bab1d4aeaf92d83f92068befa
.exe windows x86

b13c4a76f2785c495283b21353f0ece6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeactivateActCtx
EnumLanguageGroupLocalesW
SizeofResource
GlobalMemoryStatus
RegisterWowExec
GetNamedPipeInfo
FindFirstVolumeMountPointA
GetConsoleInputExeNameW
GetPrivateProfileSectionNamesA
RtlCaptureStackBackTrace

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE