d1d13472ca1a0fba76500800178afa13fac555492ccbbcc2ec06ff4dadbf756a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1d13472ca1a0fba76500800178afa13fac555492ccbbcc2ec06ff4dadbf756a
Size

68KB
MD5

dcd46eeab9731465081aa7e80439cfb2
SHA1

87310f1db2159b581f5fa24e855e7ddb3f086480
SHA256

d1d13472ca1a0fba76500800178afa13fac555492ccbbcc2ec06ff4dadbf756a
SHA512

fe63402e667648c0800f47777c94d2144750242d9c840cadb8f8fa5c804ff57ced46efe8f5584dd0a8ffab11ccbd8896febf087fd1f42ef6776f1bb4d3405a39
SSDEEP

1536:XY88YmUELUb2WPKX3fHDGwzlh0ROrt+F5X5vS62i/+QWo27w:4NUf2WPo7Pz3yat4N1n27w

Score

N/A

Malware Config

Signatures

Files

d1d13472ca1a0fba76500800178afa13fac555492ccbbcc2ec06ff4dadbf756a
.exe windows x86

3525777c709f195fca13c30da82d5ac3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetSystemPowerState
SetConsoleMode
lstrcatA
FatalAppExitA
WriteProfileSectionA
GetConsoleInputWaitHandle
SetInformationJobObject
GetLastError
BuildCommDCBAndTimeoutsW
FindResourceExW
GetPrivateProfileSectionNamesW
MapUserPhysicalPages
GetTimeZoneInformation
GetExitCodeProcess
GetProcessAffinityMask
GlobalWire
GetCommandLineA
ExitProcess
GetStartupInfoA

Exports

Exports

Fkqycwmqso
Jobeugsgkw

Sections

.text
Size: 5KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE