1cf34578a596c835c5c21b230de428cc6c1b4a1d1231e425b3c2d937048dcff0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cf34578a596c835c5c21b230de428cc6c1b4a1d1231e425b3c2d937048dcff0
Size

91KB
MD5

198d6acdab3170f17c3712f0c980aa27
SHA1

1855361ad4e2ccd8e061a139efac8a0cc53c879b
SHA256

1cf34578a596c835c5c21b230de428cc6c1b4a1d1231e425b3c2d937048dcff0
SHA512

c6915beebcba84c8b616b32de241d3cb05f41c1b610ed1c8c22b0a049d781a73859674381b36c587b039669618d453301fa7941a5f7625aaf63c59d59bebaeaa
SSDEEP

1536:nnFUwH7N/cn9Sus0nCcqsc0EABQLIRJ3X/rhSKc////////////////////////F:dREn9SyesFEABKIRVX//c//////////1

Score

N/A

Malware Config

Signatures

Files

1cf34578a596c835c5c21b230de428cc6c1b4a1d1231e425b3c2d937048dcff0
.exe windows x86

a60c2d75b49a0cb15ed7bf9fc4ed1aeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalW
GetAtomNameA
GetLogicalDriveStringsA
GetVersion
Process32FirstW
GetWriteWatch
WinExec
GetNumberFormatA
GetComputerNameExW
GetCommMask
Toolhelp32ReadProcessMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE