7f1e51a45dd0bd3f5028132f38c6cee6fa7e0ff1eb459384b1d4d333b02ce832 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f1e51a45dd0bd3f5028132f38c6cee6fa7e0ff1eb459384b1d4d333b02ce832
Size

44KB
MD5

fb21f0850c821174075b8bdc982d839f
SHA1

387eee4b588201f2aa30766d21fba057b2122200
SHA256

7f1e51a45dd0bd3f5028132f38c6cee6fa7e0ff1eb459384b1d4d333b02ce832
SHA512

aa352caf50f517d3eb515f0f25d3b7ce007ed3a67910be6ce53605050744b4cbcecd19a7009e016b76bc1b36c2d5b1991ffe5c852cfed0d0b0b43038de5d8827
SSDEEP

768:lQ/JS8YzXB6VVgz7aSPReR/ZC95/mE2CGWqhZQkAxdHGHd8cBUOpDB4W533EGV/Q:lQAFr4Ez7pp2RC95/YlLQkqmZvpOW5nO

Score

N/A

Malware Config

Signatures

Files

7f1e51a45dd0bd3f5028132f38c6cee6fa7e0ff1eb459384b1d4d333b02ce832
.exe windows x86

92009019dee90696f2364d47b68ae436

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalW
CreateFileW
ExitProcess
GetFileSize
GetModuleFileNameW
GetThreadContext
GlobalAlloc
ReadFile
ResumeThread
VirtualAllocEx

ntdll

NtSetContextThread
NtWriteVirtualMemory
ZwUnmapViewOfSection

Sections

.K66K
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.MoooM
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.N66N
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE