4bb39774c5105eea079fcdcc6e026ffe6f5e5021fd81ef8971dcadcf792e04d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bb39774c5105eea079fcdcc6e026ffe6f5e5021fd81ef8971dcadcf792e04d7
Size

59KB
MD5

dca72eff732997ae4435356f1c2051f9
SHA1

f09370fdb6731ba0064685b9faa5708438c73765
SHA256

4bb39774c5105eea079fcdcc6e026ffe6f5e5021fd81ef8971dcadcf792e04d7
SHA512

a611c5640bbc987c1e24cda36ec5e36e85a055e03fc36dfcfe1e44b30e671d61ec11413021082a5c4e8c1c69cf8cf7dd14be53ff5fdc8d36c6e29094299a9a10
SSDEEP

1536:IlZRhxlITJyR3q3AyOdKa+jxfiVsRR0iyYRmktqC:IX5HowKfiVs/0iy8AC

Score

N/A

Malware Config

Signatures

Files

4bb39774c5105eea079fcdcc6e026ffe6f5e5021fd81ef8971dcadcf792e04d7
.exe windows x86

7f7347384ca7557dddf18b4e35eca7b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetWriteWatch
GetLastError
GetUserDefaultUILanguage
AddLocalAlternateComputerNameW
IsBadStringPtrA
GetWindowsDirectoryA
VirtualProtect
DebugBreak
ReadFile
GetUserDefaultLangID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE