1880df8a6d47b5525814cc65daff8da7f38ad0f762e3964e8e00e79d2697a581 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1880df8a6d47b5525814cc65daff8da7f38ad0f762e3964e8e00e79d2697a581
Size

56KB
MD5

889ee700b0194cfacaf1d127bb30c5e2
SHA1

5a475ed3c00a22a58dbee1c6acaa54c00118d82e
SHA256

1880df8a6d47b5525814cc65daff8da7f38ad0f762e3964e8e00e79d2697a581
SHA512

faa88b392480c579441d6cceb8ba32f61d09901e62db4fd7a872b853728d372ccd5bdf4c524cbb02825aa500b53b342cd0af720c4648f424151df82a1d86b1e0
SSDEEP

1536:YI+LL+GLJXDEQ2vKh7wNxHSl96zZlIIewQjM:L+v5LJXDs/SvAXewOM

Score

N/A

Malware Config

Signatures

Files

1880df8a6d47b5525814cc65daff8da7f38ad0f762e3964e8e00e79d2697a581
.exe windows x86

94ba13d536479125fc635d3cc86d2431

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenWaitableTimerA
SetSystemPowerState
SetConsoleMenuClose
BasepCheckWinSaferRestrictions
GetCompressedFileSizeA
GetProfileStringA
LocalShrink
DeleteFileA
VirtualProtect
SetStdHandle
GetPriorityClass

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE