c0197457180eb94dff4ec5003c0fa9d1770ae25bb03a36da8c9c9a52b65839c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0197457180eb94dff4ec5003c0fa9d1770ae25bb03a36da8c9c9a52b65839c2
Size

56KB
MD5

3be522a63daf1c40571842d213364b33
SHA1

83cf3a702a549a98bde70e36bfa33974d9bcdfda
SHA256

c0197457180eb94dff4ec5003c0fa9d1770ae25bb03a36da8c9c9a52b65839c2
SHA512

f9bafb0e108e98d0e7e35f64ed0930f5cfc03b99e1ec832bb7cbd50da1bf44f4088aee40e96e776dd3c60b4c04ac5868b08807eca57c5c1566f8996646c835b1
SSDEEP

1536:BmBbSktRuZv2f5pzllyAaLWPmij/SixcCzUmZzGitjIIel25Oj1l0vNyXFWH51y7:GxtfDIbiQ891Pmce

Score

N/A

Malware Config

Signatures

Files

c0197457180eb94dff4ec5003c0fa9d1770ae25bb03a36da8c9c9a52b65839c2
.exe windows x86

24ba9f1ea9e0bc731683ebd3d1a7d7fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ReadConsoleOutputA
ExpungeConsoleCommandHistoryA
IsProcessorFeaturePresent
WriteProfileStringA
AttachConsole
BackupRead
GetConsoleWindow
SetThreadExecutionState
Heap32Next
DebugSetProcessKillOnExit

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE