b853cc879f60994bd951e607d38b6ec778421878611776986352b0b1395d8c58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b853cc879f60994bd951e607d38b6ec778421878611776986352b0b1395d8c58
Size

63KB
MD5

b98a886bc178b55c53bbb3b9ad64a410
SHA1

998d7b6ec5b060eb0ce65ad672722c09ee62ce0f
SHA256

b853cc879f60994bd951e607d38b6ec778421878611776986352b0b1395d8c58
SHA512

a2d36fc36d039f4a5c02e465ac01870ce5adfd82d1197848d6f65482755939714210634c5a75c5bbaa1af8e0d4a6c97a0ba67245a6e4d77ba2dd69402ec73b74
SSDEEP

1536:CiY8hSFTRcri6NlSajXd9Bt6So96uCAr9BXb1LOpwcA:E8Kc2wlSajBNtuLr9BXb1Lag

Score

N/A

Malware Config

Signatures

Files

b853cc879f60994bd951e607d38b6ec778421878611776986352b0b1395d8c58
.exe windows x86

9fdc857ccedbea641147039bae14458c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNlsSectionName
FreeLibraryAndExitThread
LoadLibraryA
GlobalWire
AttachConsole
GetNativeSystemInfo
lstrcpynW
IsWow64Process
DeleteTimerQueueTimer
GetFullPathNameW
GetVersionExA
Heap32ListNext

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE