c15f111cf20678fa366f51a1d174bd6e9babe05abeecf1371fe61bda18b8f90f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c15f111cf20678fa366f51a1d174bd6e9babe05abeecf1371fe61bda18b8f90f
Size

76KB
MD5

e633158932f2e0d71a44f628db3cb379
SHA1

c8987e43a031b4a297dd7963e18e83aa22269a34
SHA256

c15f111cf20678fa366f51a1d174bd6e9babe05abeecf1371fe61bda18b8f90f
SHA512

1664856e6435a64be9baa12669f632a8addca02be16fb40507ab2068541f08db6709f92dd2fdf97a26eee9945fdfe87fe24beedb0274d9e922bcec139b1d4e66
SSDEEP

1536:zqGUQTnsa3oxiAfHMipgItqNtmUqBE6HLmrhTnq66VbmVpjVrs2ryrd1vUQuq6:aQTnsa3NAEirtqNiBE6HVvmVHs2qo

Score

N/A

Malware Config

Signatures

Files

c15f111cf20678fa366f51a1d174bd6e9babe05abeecf1371fe61bda18b8f90f
.exe windows x86

b95b4a051f9ff6ed1901d76917e37c9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpungeConsoleCommandHistoryW
ReadConsoleOutputW
LZCreateFileW
UnlockFile
GetVolumePathNameA
VirtualFreeEx
OpenJobObjectA
SetLocaleInfoW
CreateMailslotA
GetFirmwareEnvironmentVariableW
OpenWaitableTimerA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE