0fcab141a6bc839b2a69cdbad7cde41eaf0de723ec9a629889a6f9adfcb78a65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fcab141a6bc839b2a69cdbad7cde41eaf0de723ec9a629889a6f9adfcb78a65
Size

61KB
MD5

f479aab316819afa6300d2a717153c68
SHA1

c0aa7ee4274b16e102769a061f3ee340f824b971
SHA256

0fcab141a6bc839b2a69cdbad7cde41eaf0de723ec9a629889a6f9adfcb78a65
SHA512

e446165f20f844395c7da2240890f6807b623ebda9452e9ec5062f9e458be82330bf9120f35dba4282a8d4ce8f053769af028b6dfbc69ad89ff8c38ede4b8202
SSDEEP

1536:4PSy3BuvHC3RnAHPrLLwYpbjSUX4235JXeyAv+y6NfWzC:4PN3aHPrLXyz4ruBV6cW

Score

N/A

Malware Config

Signatures

Files

0fcab141a6bc839b2a69cdbad7cde41eaf0de723ec9a629889a6f9adfcb78a65
.exe windows x86

8275a2424c7821ce7e715b12a5345355

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPFileNameFromRegistry
GetNumberOfConsoleInputEvents
EnumerateLocalComputerNamesA
GetSystemWow64DirectoryA
EnumLanguageGroupLocalesA
ExpandEnvironmentStringsA
GetProcessHeaps
RegisterConsoleOS2
RtlFillMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE