c23f269b5ff06616500b8bbe998b9c5f91ed3f84a686835ac76569f1d7587d7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c23f269b5ff06616500b8bbe998b9c5f91ed3f84a686835ac76569f1d7587d7c
Size

63KB
MD5

b22f968d41fa9b4264362f9cd50fd7b9
SHA1

cd7709085cb42f755f5afd9a29f03166317a4bc5
SHA256

c23f269b5ff06616500b8bbe998b9c5f91ed3f84a686835ac76569f1d7587d7c
SHA512

291bb76056bb8f50da23b77d40a6f6e89148ec03b656b414676a034407cb99d431528e127455756fbdb7f065a12c1bdf15e18460aabac35d9d098802cd585aa6
SSDEEP

1536:H4rYybfn1vcxHYNBv6YbUvWhL/FpYO3RfnhGRc+76Zd1:Ynj1E6rbUvWpFp5hfhkX7K

Score

N/A

Malware Config

Signatures

Files

c23f269b5ff06616500b8bbe998b9c5f91ed3f84a686835ac76569f1d7587d7c
.exe windows x86

e4862dab962da4b25d2c38b2bc721869

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointA
CancelDeviceWakeupRequest
DosPathToSessionPathW
SetStdHandle
DeleteFileW
SetConsoleNumberOfCommandsW
WriteProfileSectionW
GetProcessTimes
SetConsoleCursorPosition
IsWow64Process

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE