bc2a42854aa59072b87c51de2a9b6151d2fabfb607f1323d1aff31a4ead21623 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc2a42854aa59072b87c51de2a9b6151d2fabfb607f1323d1aff31a4ead21623
Size

76KB
MD5

a2449f95c2285f72601f18a3a2b04125
SHA1

15f04ae1c4e1294b421c05b0b0993efcc5efc420
SHA256

bc2a42854aa59072b87c51de2a9b6151d2fabfb607f1323d1aff31a4ead21623
SHA512

766f728064c74d93e16440dfdf3e9cc3ca4722d6414c9b53206bdf5d64f131cd0103e5589d88ac36aaab397bc05201d7a8e7b3936bfa44a8709b636d53edebf3
SSDEEP

1536:SsH52/+NHiKfqpm2XnwwAgloPAOjWsncxuc13wyAQ/cyvOMpjVrs2ryrd1vUQuq6:hH5U+NH1ypmDgez5n3wgY/cIHs2qo

Score

N/A

Malware Config

Signatures

Files

bc2a42854aa59072b87c51de2a9b6151d2fabfb607f1323d1aff31a4ead21623
.exe windows x86

8ed140b8c73d991a6d2673b353498a90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FoldStringW
InterlockedDecrement
NumaVirtualQueryNode
InterlockedPopEntrySList
TrimVirtualBuffer
SetConsoleWindowInfo
LocalShrink
ExpungeConsoleCommandHistoryA
ContinueDebugEvent
PulseEvent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE