b19552dbfbcf33de069f475481996a4295af1c6cc4b48017252f1381064f7174 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b19552dbfbcf33de069f475481996a4295af1c6cc4b48017252f1381064f7174
Size

67KB
MD5

dec6207ac359ff656235d33caf961cbc
SHA1

7cb46fb7f7cc1c62596c46c30b0764306f68d1fd
SHA256

b19552dbfbcf33de069f475481996a4295af1c6cc4b48017252f1381064f7174
SHA512

3acd5324bd3c9dbb68cff1f0869d72a6bd582af77c1638b300617fd43da66eebf07fc3585eb55658e34a941063f53f0e68b1156adf299bfed45fbe9ef9544ee6
SSDEEP

1536:ORn9VQDYuw8y4te9lR+YEdzvd9XpHQ5AmijHw/BQfK:Cn9VQcuTte9l0YEdjdZaa+uK

Score

N/A

Malware Config

Signatures

Files

b19552dbfbcf33de069f475481996a4295af1c6cc4b48017252f1381064f7174
.exe windows x86

b146ab6c245d4828954806efdd500f83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryExW
GetDiskFreeSpaceExA
VirtualAlloc
EnterCriticalSection
VirtualQuery
AttachConsole
IsDebuggerPresent
GetDefaultCommConfigW
EnumResourceLanguagesW
RtlCaptureStackBackTrace
QueryActCtxW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE