debc1a320cc397bd78da518e0e2f3417def1bd702c538281f25b28ed0970c2b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

debc1a320cc397bd78da518e0e2f3417def1bd702c538281f25b28ed0970c2b4
Size

94KB
MD5

4940af0c641fe7d83a246bc994242390
SHA1

4e72d7f7385f02ff948958cd7cb60a16c5aec8b2
SHA256

debc1a320cc397bd78da518e0e2f3417def1bd702c538281f25b28ed0970c2b4
SHA512

bb752f4dcd7590c320c107816bc80832895a3763ecce54cb4ba1681913c175e5f307b61022a61ad7c9de1683f84adf1ba64d98d95187f120643eaf64045b0cf3
SSDEEP

1536:Bake5EhfzVoLap1LbnyZDxSWnLxdoSkQlVkxwjjuJVc4EFxVNrAa0Z+:Ba7EhbWLap1vyRIWnLxuwaxUjSfGyZ

Score

N/A

Malware Config

Signatures

Files

debc1a320cc397bd78da518e0e2f3417def1bd702c538281f25b28ed0970c2b4
.exe windows x86

c2d93bba88b9808e1d31697c46d9b3a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasW
GetProfileIntA
lstrcpyn
NumaVirtualQueryNode
GetSystemWow64DirectoryW
GetConsoleCharType
ResumeThread
CreateConsoleScreenBuffer
GetUserDefaultUILanguage
IsValidCodePage
CompareStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ani
Size: 37KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE