57162611b1b55a6e600170ad4dabae5f91814168380d118bd3f23e0a98a15e72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57162611b1b55a6e600170ad4dabae5f91814168380d118bd3f23e0a98a15e72
Size

91KB
MD5

a6c8c4fac4e7e0b7ef3a8f2732b3be4b
SHA1

995b9cfb6cd6339e69c7bf0ca2c68158117e3913
SHA256

57162611b1b55a6e600170ad4dabae5f91814168380d118bd3f23e0a98a15e72
SHA512

10ad87dc03b6cd3798346de52c58edda47fca2b0fc629e4b76f82ff76cc7bba2cfbeab4a5da2a6811df00efce5daa21a41b6e9dc8d94f3ef12b032a22c5cee23
SSDEEP

1536:2ObRBKUC/5deR5es5ORZIoYbXSpJCtv3ONSwMJQrEltjCEHuaqwsSobHj9:2O9U7//ejeoVoyWJCJw7rEnjSaq3bj9

Score

N/A

Malware Config

Signatures

Files

57162611b1b55a6e600170ad4dabae5f91814168380d118bd3f23e0a98a15e72
.exe windows x86

cfa88341c56d51a0c49d09b13dd25898

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputVDMA
ReleaseActCtx
IsValidLanguageGroup
GetProcessHeap
DuplicateConsoleHandle
lstrcpyW
GetFileAttributesW
GetModuleHandleExA
GetLocaleInfoW
BaseProcessInitPostImport
Thread32Next

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE