0561b8ed22b080c43b1942ec40fbd6cff751e5dc168c7f8351ae6ec0467f7dc5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0561b8ed22b080c43b1942ec40fbd6cff751e5dc168c7f8351ae6ec0467f7dc5
Size

71KB
MD5

342e674420fea8a30b6f86d476c66564
SHA1

8f15b886054b43e0e17847ea57362343ac3c9496
SHA256

0561b8ed22b080c43b1942ec40fbd6cff751e5dc168c7f8351ae6ec0467f7dc5
SHA512

540f66d1430f53195e00d7376057cf825f1c95afdea5709a179cfd2eade7e77059dd38bad6881f31ac326d8baabffdcd382083c5e1db961de44aacb8631e82a9
SSDEEP

1536:sg/fnJOzfSqHmMbllz8JnnPAJf4PUgSZrpLB9++MiV5wURx:/GHmMbll49n+4PUgSZFLOswAx

Score

N/A

Malware Config

Signatures

Files

0561b8ed22b080c43b1942ec40fbd6cff751e5dc168c7f8351ae6ec0467f7dc5
.exe windows x86

5677eba631910fbbbde200a6dfb4e7d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionStringW
FindActCtxSectionStringW
FatalExit
GetConsoleCommandHistoryW
ExpandEnvironmentStringsA
FindFirstFileW
GetSystemDefaultUILanguage
SetConsoleOS2OemFormat
lstrlen
DecodePointer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE