881d468d71efa431f0e414852e97eb2abb7942184f89d09fe2b630bdb2cf385f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

881d468d71efa431f0e414852e97eb2abb7942184f89d09fe2b630bdb2cf385f
Size

92KB
MD5

19ce78deaef7de1f3c87e552d6c1b634
SHA1

8cc8a3e4620fa8ad48e04fece91eb6d701c54626
SHA256

881d468d71efa431f0e414852e97eb2abb7942184f89d09fe2b630bdb2cf385f
SHA512

3fbf135e08b040575aeb8cef11e94f9c02741ce4f447d9f0acc6db92a8992b535d6ee763190e9f8ab58a9d3664f29c42949b4e7f780b39fc98af21080532280c
SSDEEP

1536:041VBe2vVZAIgcEqg5a4nB068l1udZ15zZihQR4ZyeECnbZ83YacIyP/69QAq0Gp:NDBe2ng24fnB06u+15QhQR4k8lKYBbWU

Score

N/A

Malware Config

Signatures

Files

881d468d71efa431f0e414852e97eb2abb7942184f89d09fe2b630bdb2cf385f
.exe windows x86

d93102f67926d9ae092344f88805efee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleW
GetFileAttributesA
GetCPInfoExW
SetEvent
GetDateFormatA
GetWriteWatch
ReadConsoleInputExW
DisableThreadLibraryCalls
BackupWrite
TlsSetValue
lstrlenA
ReplaceFile
BaseInitAppcompatCache

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE