70a5c64e40e602313b903f649d83682aa003e27efbb45a736c49421eb36f0591 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70a5c64e40e602313b903f649d83682aa003e27efbb45a736c49421eb36f0591
Size

56KB
MD5

a59a88569f20540ef01b76d0fdb0bbad
SHA1

75447570e2515e7b2fe24734284ae11defe445e2
SHA256

70a5c64e40e602313b903f649d83682aa003e27efbb45a736c49421eb36f0591
SHA512

27adb5116845ed2b9068c3e8a7e031522f6c667bce97aa27ff8ca15613a78f780a83d884b80e2e32c1642610dda8d75ba8688dea57e9b7644e2c71a2c684090c
SSDEEP

1536:1cDNcpZWnlHkEoW8Ku6nDqDg/aqLeADeZA5:W5cpZMkqDqDgiqLeADKi

Score

N/A

Malware Config

Signatures

Files

70a5c64e40e602313b903f649d83682aa003e27efbb45a736c49421eb36f0591
.exe windows x86

844c1172f574b98526b9d08760d7906a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BindIoCompletionCallback
SetupComm
VirtualLock
GetFileAttributesExA
SetConsoleCursorPosition
GetFirmwareEnvironmentVariableW
ResumeThread
SetDefaultCommConfigA
RtlUnwind
SetVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE