97a459f36f74234676ffb77a8a63feb572c5003fd07296c4157ebf3c90b37d78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97a459f36f74234676ffb77a8a63feb572c5003fd07296c4157ebf3c90b37d78
Size

83KB
MD5

51a6c0b218abc703ccf5944a73a10453
SHA1

4b34ce4c8d38336be024d0e67ecbe473a7e0c44a
SHA256

97a459f36f74234676ffb77a8a63feb572c5003fd07296c4157ebf3c90b37d78
SHA512

457d95b5bcbd027912ed2e526160cbe1349544b32b5816637c4a0697f752470b195fdc5387826009a0e3ada920b8ab2ab180b3c610ea0ee27d58a214f7c32b04
SSDEEP

1536:74ZN100FOUnqYmV4UVf85UkDHT9I9A/9+RewX5q9pjVrs2ryrd1vUQuqKsw:7oN100FOUyV4Uu5hDz9nIReHHs2qm

Score

N/A

Malware Config

Signatures

Files

97a459f36f74234676ffb77a8a63feb572c5003fd07296c4157ebf3c90b37d78
.exe windows x86

3d3f127ee4c916dc4fa712d5931a00aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileSectionW
GlobalGetAtomNameW
FindFirstChangeNotificationW
SetDllDirectoryA
CreateDirectoryA
GetDefaultCommConfigA
CreateMailslotW
ExitThread
EscapeCommFunction
ReplaceFileA
GetConsoleAliasA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE