7e49d4e6b1af20d0c93780aae411f760d2cdc38293a5dded8161e7cafd5ab318 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e49d4e6b1af20d0c93780aae411f760d2cdc38293a5dded8161e7cafd5ab318
Size

115KB
MD5

0ff3c29796d906fb5a079e6932f34e00
SHA1

48934e2e419ba3d5fc4265ab8960369f27f9a548
SHA256

7e49d4e6b1af20d0c93780aae411f760d2cdc38293a5dded8161e7cafd5ab318
SHA512

8a635f40b546b7db1c251c94e194364d0d9e959244bd31ba3da0e8e982cec7a946f1abc3fc9d83231539d0f18bb9ba5576e13edd11968399c413ee61d4516930
SSDEEP

1536:mri9qnMI4tiSMLSy32tHhNyOLPcxFWyJ7RltUz8C3O0l/PJ53ElzypBLmGVZSLXx:V97K4G6ceSNX3j0lv3ElzcBY23oI8z/

Score

N/A

Malware Config

Signatures

Files

7e49d4e6b1af20d0c93780aae411f760d2cdc38293a5dded8161e7cafd5ab318
.exe windows x86

9a660465353e9ca509b1dd50069fdb67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotW
GetVersion
DeleteFileA
GetConsoleTitleA
WriteConsoleW
GetStringTypeW
HeapCreate
GetExitCodeProcess
Heap32Next
SetFilePointer
SetCurrentDirectoryA
DeleteFileA
GetProcessHeap
GetConsoleAliasW
GetModuleHandleW
GetShortPathNameW
GetModuleHandleA
CreateFileMappingW
GetACP
SetEnvironmentVariableA
GetStringTypeW
DeleteFileA
HeapFree

mstscax

DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
DllGetTscCtlVer

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ