a5b6331d1c80318a912f6af37354ae107c601cb0cc46d89554617e20befc10a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5b6331d1c80318a912f6af37354ae107c601cb0cc46d89554617e20befc10a9
Size

57KB
MD5

88e8135e782c7bcb1724f90d32d84b72
SHA1

645e14aab680e6be04d1565874bd13baae6bd809
SHA256

a5b6331d1c80318a912f6af37354ae107c601cb0cc46d89554617e20befc10a9
SHA512

37588baa764c9704a38cb57e9b5270675aa75d211b2206c846a87d9d27d4651b60dac6db56317f2a81cfff78770080d0dd5fd8be724c7293591895f6c06aa70d
SSDEEP

1536:AZr1BZyxhJ2ieGws7WpsOZjTzEc5K4cp7v:AJ1HrHWI5Z3zNByz

Score

N/A

Malware Config

Signatures

Files

a5b6331d1c80318a912f6af37354ae107c601cb0cc46d89554617e20befc10a9
.exe windows x86

434407ef649ee61090d84c11e579d5c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryW
WriteConsoleOutputAttribute
GetVolumeInformationA
LZCreateFileW
VerifyConsoleIoHandle
EnumSystemCodePagesA
DebugSetProcessKillOnExit
InitAtomTable
GetProcessId
AddAtomA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE