a212deecc683027ce67cc65d9af7ed8d27bad7064f274d36113d198c626aa355 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a212deecc683027ce67cc65d9af7ed8d27bad7064f274d36113d198c626aa355
Size

56KB
MD5

b48e6501c49552246592ce1f8477a715
SHA1

95ab49140e89c871a4604bbd912efabd01fd0640
SHA256

a212deecc683027ce67cc65d9af7ed8d27bad7064f274d36113d198c626aa355
SHA512

30b76529cf6d05952edcb6330d36f2a703cfcd25dcd02b0e8a081c0bdd9f88b6ce58e5fa4ad10b1ed434269ee12438fd3d0531515783cc32aa485b6288598c9e
SSDEEP

768:ixrynQWoJlaHMtdLu66v+7p43RqyPBKE5bx7aebQyitIYiv0JrHDCYCbemz3iYAS:4rLuNMJy9i8qD2Y+jZ58QKZxpq

Score

N/A

Malware Config

Signatures

Files

a212deecc683027ce67cc65d9af7ed8d27bad7064f274d36113d198c626aa355
.exe windows x86

858f4afc111419bd0ab673aa92ce7d9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyLZFile
OpenFileMappingW
GetStringTypeW
ReadConsoleInputExA
MoveFileWithProgressA
ExitThread
UnregisterConsoleIME
BackupWrite
RtlMoveMemory
OpenDataFile
GetCurrentDirectoryA
GetPrivateProfileIntW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE