4b05edb29ad2e3a07c9d5ba7825169a9517aa59bbf6450d96eae3181fbf9bc5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b05edb29ad2e3a07c9d5ba7825169a9517aa59bbf6450d96eae3181fbf9bc5d
Size

56KB
MD5

16c6474b9c0d400ac77db24335d3d827
SHA1

f4687c1c71fdeadbcb4e66909006885894b425e2
SHA256

4b05edb29ad2e3a07c9d5ba7825169a9517aa59bbf6450d96eae3181fbf9bc5d
SHA512

8b0801b7d30f25a75491e36583f484f2c4c05a96c6dcd0bcbc56eb205a21aa8aa7b4b32dd710849193fb44a94a189f9eba052293098a66d6ab061923d2e21b2c
SSDEEP

1536:lHcstkM7yfA0JhR27e98r5l9ZwNNN4K06JgCU3t:1b0N27emIj/JgCU3t

Score

N/A

Malware Config

Signatures

Files

4b05edb29ad2e3a07c9d5ba7825169a9517aa59bbf6450d96eae3181fbf9bc5d
.exe windows x86

ca7b2e4af909088568f76935d5366b5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStructA
BackupWrite
GetProcessShutdownParameters
FindFirstFileExW
lstrlenA
DebugActiveProcess
InterlockedCompareExchange
GetPrivateProfileStringA
BaseAttachCompleteThunk
SetConsoleMenuClose

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE