2614ef48429a87352eaf032eedaf6d8fd94fc9567be7c420e9a758b48f7afaf1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2614ef48429a87352eaf032eedaf6d8fd94fc9567be7c420e9a758b48f7afaf1
Size

123KB
MD5

0454720fcc458760f1bc3e42b677d34c
SHA1

37b70531d9f860299db6c2b7ced06cddc78961e0
SHA256

2614ef48429a87352eaf032eedaf6d8fd94fc9567be7c420e9a758b48f7afaf1
SHA512

1a21c94ed8c611334e86ef09a01927ca067aebe33c66da82c009f1081d1b83e22e1b3fbd93c06a7ad5728901bfe8ac74bcb5d127131256fee663c4c431ec74b3
SSDEEP

3072:dHXZnjVUba6I6TQNMHEm3FA+Ra043hN5bBCenQqRkzKkNXx5:dHxVUbRIIyMkeAy43hNLRsKkNXx5

Score

N/A

Malware Config

Signatures

Files

2614ef48429a87352eaf032eedaf6d8fd94fc9567be7c420e9a758b48f7afaf1
.exe windows x86

6ed53521de314e120a017074d594228c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeLabelW
SwitchToThread
GetConsoleCommandHistoryA
CreateSemaphoreA
Process32FirstW
DisableThreadLibraryCalls
SwitchToThread
UnregisterWait
GetConsoleOutputCP
EnumResourceLanguagesA
FreeVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 109KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE