b64eb87289f649575f0a7324e5d7c239a43b685f1834b2be2cc9b5dbdc422655 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b64eb87289f649575f0a7324e5d7c239a43b685f1834b2be2cc9b5dbdc422655
Size

63KB
MD5

284aa0463f34125057c1c4445ab022b0
SHA1

639505f0a8a277cd739a87f279bb2bde4e61ade8
SHA256

b64eb87289f649575f0a7324e5d7c239a43b685f1834b2be2cc9b5dbdc422655
SHA512

1826f14a3c209e36fbd93c3439a9bbad8049e63ddd582739378ed36907ea04eeae1865d68ede50fa5de714dbdb780c89277a4fcb86b428edd9f93d7a1f86cfcf
SSDEEP

1536:cmywJJ+xf13/y0A700EVZwdJIhD49lL+4RKpRpj:cmywJUdBv2lG2eZx4RKRj

Score

N/A

Malware Config

Signatures

Files

b64eb87289f649575f0a7324e5d7c239a43b685f1834b2be2cc9b5dbdc422655
.exe windows x86

bc229bac3295ab84f35966273765a9b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseProcessInitPostImport
GetFileSize
CreateProcessA
lstrcmpA
GetConsoleAliasA
CreateVirtualBuffer
GetThreadIOPendingFlag
GetTapeParameters
SetCurrentDirectoryW
MoveFileWithProgressW
GetConsoleProcessList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE