72a6b0fd13a48a798ce09cd04dd1d55b3a817f2025c896723425cb5431718e01 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72a6b0fd13a48a798ce09cd04dd1d55b3a817f2025c896723425cb5431718e01
Size

76KB
MD5

f521d098448a9811356e5a656fc6b618
SHA1

ac740cad617e2b10f2036f631061bca7be339f51
SHA256

72a6b0fd13a48a798ce09cd04dd1d55b3a817f2025c896723425cb5431718e01
SHA512

cf90f2fbb0d7fee50808a5dbc9f422a33c4862603cedbc59e35835e4989acd8ec451d8b509d5f51941f80988105055ae3d0ec5f3422b1f43ee883b032777d081
SSDEEP

1536:mok/o5jiwVMSJ2AK1PzBZVn//0+pXdHRpjVrs2ryrd1vUQuq6:mok5a2A0PdZVX0gHHs2qo

Score

N/A

Malware Config

Signatures

Files

72a6b0fd13a48a798ce09cd04dd1d55b3a817f2025c896723425cb5431718e01
.exe windows x86

28561048b52e599f946eba29d15e16b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NlsResetProcessLocale
GetUserDefaultLCID
GetConsoleAliasExesLengthA
IsWow64Process
CancelIo
GetCPInfoExW
EnumerateLocalComputerNamesA
ReadConsoleOutputW
BindIoCompletionCallback
ReleaseActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE