935247ef1f0ae4aabea49920f933c1c39b4240a9276b112e15c1d8db14311230 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

935247ef1f0ae4aabea49920f933c1c39b4240a9276b112e15c1d8db14311230
Size

62KB
MD5

e066019c2469d95a2f7e10b0e8dae245
SHA1

9d983d3a796a5589ad9caafc4526bff01fa6c129
SHA256

935247ef1f0ae4aabea49920f933c1c39b4240a9276b112e15c1d8db14311230
SHA512

5a7af873e8a1ee4a8a7f5426f04bfda402d6532cba9d89227487d322c7760f2aca2088221ce875919623a1df463d1952e01e7dc2dd7baf1dedc497d4f7268138
SSDEEP

1536:LRYXuHnz22f+2jYCfXAye9zIGXWrbdC1JWviGXU+ee+6p6:lYCjnXAyF9bdC1JWa8U+e77

Score

N/A

Malware Config

Signatures

Files

935247ef1f0ae4aabea49920f933c1c39b4240a9276b112e15c1d8db14311230
.exe windows x86

2e60388745cf8c2c85e1ad492d8f88d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryDepthSList
ReadConsoleInputExA
MoveFileExA
GetNamedPipeHandleStateW
GetVolumeNameForVolumeMountPointA
AddAtomA
GlobalCompact
ZombifyActCtx
EnumerateLocalComputerNamesA
WriteConsoleInputA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE