418e867a7d43abbebc280295a1f52db56d4efe7c0299e86b5f9f70b19486d7ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

418e867a7d43abbebc280295a1f52db56d4efe7c0299e86b5f9f70b19486d7ab
Size

66KB
MD5

9ed2d10aa3bd791ce023b9c1fb31a1a8
SHA1

ca447f83096527fb3b397f5d87d3f980d5e5b7d4
SHA256

418e867a7d43abbebc280295a1f52db56d4efe7c0299e86b5f9f70b19486d7ab
SHA512

d483056c6dd6b4c323c84321638298a9a2943f33f17eff92ed0ba73805af8e0eb3c21a17f457157f983c5f2c653979ee8debffe394aba0d9ae56410003a62c16
SSDEEP

1536:1prjrykBh4AfVRMkMLiBtRnZ9fks8Lv4UXLdYo9kErfA:19KS/RM/LiBznZS7FYo9drfA

Score

N/A

Malware Config

Signatures

Files

418e867a7d43abbebc280295a1f52db56d4efe7c0299e86b5f9f70b19486d7ab
.exe windows x86

959870e541d61ec9aaf8f587df0b8fec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FoldStringW
lstrcpyW
SetConsoleCommandHistoryMode
GetVersionExA
EndUpdateResourceA
Heap32Next
Heap32Next
QueryDosDeviceA
SetComputerNameW
Process32NextW
WriteProcessMemory
GetTapeParameters

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE