448cbf3264123244276c6c65debdc8af464f963f1b83875bd9be4002f83218ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

448cbf3264123244276c6c65debdc8af464f963f1b83875bd9be4002f83218ab
Size

71KB
MD5

f71439c7838b498bb8a192361bc47c13
SHA1

dbb60d900de3bc7748a0b303354cdd0389520865
SHA256

448cbf3264123244276c6c65debdc8af464f963f1b83875bd9be4002f83218ab
SHA512

6955282a4b9f27b1b0c58403e03d5c382b1871efd1799f26569c720e92ce6ff91466a440eed0479546e8f0a9f03c3ea889fc63053ced0fdff2f5f579cd09e472
SSDEEP

1536:tWJP4a3//riquRZxU89BI03Beou65dQc1+b8RaPVz:tWl4k/+quRU88IB9P51+4Radz

Score

N/A

Malware Config

Signatures

Files

448cbf3264123244276c6c65debdc8af464f963f1b83875bd9be4002f83218ab
.exe windows x86

06c3e060da5cc69bbaeab5fe39a85321

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PostQueuedCompletionStatus
CreatePipe
MoveFileA
PrepareTape
GetConsoleAliasesW
FindFirstFileW
lstrcmp
GetStartupInfoA
ReadConsoleOutputW
Thread32First
GetFileSizeEx
GetSystemRegistryQuota

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE