e597deb3c34d3ec81586841497b1546e40161e01563d178a9e58f9f1589feb42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e597deb3c34d3ec81586841497b1546e40161e01563d178a9e58f9f1589feb42
Size

56KB
MD5

05a8363c7b09a8e5e615afc9c135dda1
SHA1

7e0f3a052aa629bb8e92581498cb969cd0623d46
SHA256

e597deb3c34d3ec81586841497b1546e40161e01563d178a9e58f9f1589feb42
SHA512

59d47ce0212ad41fead1666aaba7db685afeb9c47d853c36a75a6abfa9f7b271dea3838ba51f5450c87a9da227c32e2ee6e52cd24cbf967165d917036d84ed58
SSDEEP

1536:9BKJG/xFc91Cqes98Z95iQhR4ddweu8cBBJK:CJ6a91Cs9K/bR4jw9vbK

Score

N/A

Malware Config

Signatures

Files

e597deb3c34d3ec81586841497b1546e40161e01563d178a9e58f9f1589feb42
.exe windows x86

aa08d72db8d41b5cc29d429a4e218c76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Thread32First
LZStart
SetConsoleActiveScreenBuffer
UpdateResourceA
LZDone
CreateTimerQueue
SetConsoleFont
FindNextVolumeMountPointW
HeapAlloc
CreateProcessInternalA
GetCalendarInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE