625a80ac3bd81180748c3d3e85857484bbc9f7b6431c4087624356c37f467225 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

625a80ac3bd81180748c3d3e85857484bbc9f7b6431c4087624356c37f467225
Size

62KB
MD5

03324895bfd86e04bfe06961866383b2
SHA1

5b133291c6df36138c3e35b815878afca6865a61
SHA256

625a80ac3bd81180748c3d3e85857484bbc9f7b6431c4087624356c37f467225
SHA512

e44514ff06d7abe36d7a386bc0cb5dc705d4acdbaa42c1f0d9dba5e0bb56d45e7d323c57308e9a9dff2c638e1a2aeab1d232289603b259bf42821c35ecf8fbab
SSDEEP

1536:TZCIIpeKe43c6kryzMZAFGVb7pbcFET3DuviV+OyZ1:TZCWKe5tryoaK7pnzuvS+7

Score

N/A

Malware Config

Signatures

Files

625a80ac3bd81180748c3d3e85857484bbc9f7b6431c4087624356c37f467225
.exe windows x86

44bb0cc96d1d20b1e8cf931af2a38044

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNativeSystemInfo
CreateJobSet
GlobalAlloc
GlobalDeleteAtom
SetConsoleTitleW
CallNamedPipeA
SetConsoleOS2OemFormat
lstrcpyn
CheckNameLegalDOS8Dot3W
WriteConsoleInputW
CreateProcessA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE