7c98a5eb69a98e59eec0b0006ec4f10ca1089a8841b2de0b2fc32236ec8130ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c98a5eb69a98e59eec0b0006ec4f10ca1089a8841b2de0b2fc32236ec8130ab
Size

56KB
MD5

e0d20df6ea4cb296846ed39e3a044b17
SHA1

b8bd7928fa6137e5ea287026cad449d285bec213
SHA256

7c98a5eb69a98e59eec0b0006ec4f10ca1089a8841b2de0b2fc32236ec8130ab
SHA512

5edba5ba9c6aed56b658270b6d917a8f9c7b85ae93a84db0047c07b76382f69adb9a366005accc38411eeb831947d2d6602c04ffa6b5f7e641323495112ff031
SSDEEP

1536:btWjXopWVdabL6iKeu0KhbPjG7G2sXbHZfDbnSao4:JaXo0V0f6iKSKhbPSS2QbHZffnB

Score

N/A

Malware Config

Signatures

Files

7c98a5eb69a98e59eec0b0006ec4f10ca1089a8841b2de0b2fc32236ec8130ab
.exe windows x86

f7fe061aa4805bd6c89c9194e1c46995

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
LZOpenFileW
GetConsoleAliasExesLengthA
GetModuleHandleW
LocalAlloc
GetProcessShutdownParameters
VirtualProtectEx
EnumDateFormatsW
CancelTimerQueueTimer
LCMapStringA
GetConsoleFontSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE