b57f5202ca99925fbf02d1019ac64ea5b9699f136aceb16dd70671e7b4dd536b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b57f5202ca99925fbf02d1019ac64ea5b9699f136aceb16dd70671e7b4dd536b
Size

66KB
MD5

511b5bfd211b9951a4fd16609449b2f7
SHA1

6e5f444fd5ef7a6bf30b228cec839ed522a6522e
SHA256

b57f5202ca99925fbf02d1019ac64ea5b9699f136aceb16dd70671e7b4dd536b
SHA512

a29a84ae5e79569191dfe7a98332530c213718f7cb1306476e44606be45619db5b4b53ef462b76fc0bd630b6394a2c50e68829cce2e7c0115ab55f9949369288
SSDEEP

1536:bPxFN/mAm29rrufMpSxWmlm+Y9MWv6o+wDeTj4YLO/zSXnpT:bPxP/mm9WfiSx5s9R2hj42O/ep

Score

N/A

Malware Config

Signatures

Files

b57f5202ca99925fbf02d1019ac64ea5b9699f136aceb16dd70671e7b4dd536b
.exe windows x86

0553ea7b9bb47264b42435dbfc00b255

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeMountPointA
DeleteVolumeMountPointA
WriteConsoleOutputA
DeleteVolumeMountPointW
GetNumaProcessorNode
Heap32First
WriteConsoleOutputW
FillConsoleOutputCharacterW
CreateMailslotW
GetNumaAvailableMemoryNode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE