a54aa5f72c9b65b7877b4f760c5b63b9e91681cab2deb28278540a8098d333cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a54aa5f72c9b65b7877b4f760c5b63b9e91681cab2deb28278540a8098d333cf
Size

63KB
MD5

b3c5a9758794de299ba1a5e6f6c131bb
SHA1

3d896d976837bd288515b49332306c8203567701
SHA256

a54aa5f72c9b65b7877b4f760c5b63b9e91681cab2deb28278540a8098d333cf
SHA512

f31a0f1b3542494fd46191ccb5771a07af6f76174a626a6256fb55ccc3d0124c7ce841ca141fa7313f6aae1de13478c22e5b434659ac727f6799fe8376dc0ead
SSDEEP

1536:BPX73rAgB8DncKN2WaTBXFpf9tcRRnnUGPNM:BPX73rAgB8DwWqDU7hNM

Score

N/A

Malware Config

Signatures

Files

a54aa5f72c9b65b7877b4f760c5b63b9e91681cab2deb28278540a8098d333cf
.exe windows x86

2f7b7617963aeef1fb6a4c7b7dc51d6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalHandle
GetConsoleInputExeNameW
OpenWaitableTimerA
GetUserDefaultUILanguage
BackupSeek
GetBinaryType
CreateActCtxA
GetProcessId
FindNextVolumeW
GetConsoleCommandHistoryLengthA
FindFirstFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE