a9f541e4f1219c4427b08305d26f4b6511caabe22810ab412bd6db7695516b22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9f541e4f1219c4427b08305d26f4b6511caabe22810ab412bd6db7695516b22
Size

63KB
MD5

6e45d9441f80522120b0710a9deb547e
SHA1

04d92db377c268f068787d4c5b6ef158ee81f5f2
SHA256

a9f541e4f1219c4427b08305d26f4b6511caabe22810ab412bd6db7695516b22
SHA512

b97cfa244f2d85d9c7ddaf6483dc85f2526a5716b8bee76ddb23b2b8a51171cb493f5b5736040d6c997f8bae35d2111ffd554992fc50845c8158655aee4f1a8c
SSDEEP

1536:7043s1uC78hShXaS9C7pZfgeqMedyRXuxRjpoKw29qaRWdeVafvON:wl78hScS9CrfgeedKuxnoK50C

Score

N/A

Malware Config

Signatures

Files

a9f541e4f1219c4427b08305d26f4b6511caabe22810ab412bd6db7695516b22
.exe windows x86

e6bd7185994ee03e609da4a1f8310544

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleFontSize
HeapQueryTagW
TerminateJobObject
SetThreadPriorityBoost
WaitNamedPipeA
FindVolumeMountPointClose
SetConsoleNlsMode
SetThreadIdealProcessor
OpenJobObjectW
SetConsoleLocalEUDC

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE