43eef28f9d561b64d7145fc8c24580e24588468f361fdccf2c87c1e5c33ca986 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43eef28f9d561b64d7145fc8c24580e24588468f361fdccf2c87c1e5c33ca986
Size

133KB
MD5

d10b448dca0ddf3e4e051d8d7e2dcd31
SHA1

60e36f5b5e093d30d8e5c3b92514de715abb4e48
SHA256

43eef28f9d561b64d7145fc8c24580e24588468f361fdccf2c87c1e5c33ca986
SHA512

91d1b3917e71d8c8c0482ed9405a4d548f2422ef65d853cbede3b3364c8183d7f431b62ab42e0559b8f28832e0c9ba85a7cdff8070bac3f405f7472c01a8e1e1
SSDEEP

3072:Xzpk1jaB0a8NxvutzlHe45QChDQ83vRVkJuFxK2pgNGvSGjtPkv:XsjaTsktzde5ChDQ83vR+zynDPU

Score

N/A

Malware Config

Signatures

Files

43eef28f9d561b64d7145fc8c24580e24588468f361fdccf2c87c1e5c33ca986
.exe windows x86

4b8b4974318d32bbcc0afe3fecfaf286

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyLZFile
GetStringTypeExA
PostQueuedCompletionStatus
GetFileInformationByHandle
HeapUsage
ExitThread
EnumResourceNamesW
TlsGetValue
CloseConsoleHandle
ReadConsoleW
lstrlenW
GlobalGetAtomNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 133KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE