258578e9a3d83d22bb596876f06d7e7b9599af88b40c0651880abb96c2e61a60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

258578e9a3d83d22bb596876f06d7e7b9599af88b40c0651880abb96c2e61a60
Size

76KB
MD5

cbcff24ede20340d7aafc06e334fd47f
SHA1

f960f9aea374b62345927c070b3482b24de288e0
SHA256

258578e9a3d83d22bb596876f06d7e7b9599af88b40c0651880abb96c2e61a60
SHA512

e9b0224ff3d1dcfbff5dc742b5b0cb1980bbc3aa43383bc0442cae39cc4a296062be12a519c23ab557683bceb8bccd12d595a17686204385534b03b2d46ba8a7
SSDEEP

1536:UWoVlT5LU5Tjf1d+H1ttsPdnsnPEPTF9CUlkm82hW8fPL9:UWmlRUZsCdsOF9CUlR8vYL9

Score

N/A

Malware Config

Signatures

Files

258578e9a3d83d22bb596876f06d7e7b9599af88b40c0651880abb96c2e61a60
.exe windows x86

a0dcbdb4fd5cc04835f7ab21be32530c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyn
FormatMessageW
BackupWrite
GetNumberOfConsoleMouseButtons
DuplicateHandle
CreateSocketHandle
GetConsoleHardwareState
ZombifyActCtx
FindFirstChangeNotificationA
OpenProcess
GetPrivateProfileStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE