98d11a10b32e86e2cf0d45491e56bec7845f97a8a1c31d925e4fde1b572ae979 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98d11a10b32e86e2cf0d45491e56bec7845f97a8a1c31d925e4fde1b572ae979
Size

92KB
MD5

4455df7516f3233e25a85f37e871dd70
SHA1

4cad00bf8be8eee080a99ea17d9f682efa18235d
SHA256

98d11a10b32e86e2cf0d45491e56bec7845f97a8a1c31d925e4fde1b572ae979
SHA512

8cea36be092e739ed7b3044a12a920cf54f7030a3e577feab6707f02ccdec869847f0694958909b8a84e746d23ad9eede1144cc229090c922e92e8761948318c
SSDEEP

1536:LEN+o5JVuspZarAGgyxonr+v8j+hJL3s6Z83YacIyP/69QAq0Gb8/Z5H83oKz:IN+szWaPa0jcpBKYBbWq0GQP0oKz

Score

N/A

Malware Config

Signatures

Files

98d11a10b32e86e2cf0d45491e56bec7845f97a8a1c31d925e4fde1b572ae979
.exe windows x86

6ca59b305e1dcb3efef8679ecc6508d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommMask
GetSystemDefaultLCID
EnumResourceTypesW
lstrcpy
CreateEventW
NlsGetCacheUpdateCount
FindActCtxSectionStringW
GetWindowsDirectoryA
GetConsoleCommandHistoryLengthW
DisconnectNamedPipe

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE