92956a34e6776cb4971ebe3cf97e89087672ba28ac45b496cb1f3d465537718a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92956a34e6776cb4971ebe3cf97e89087672ba28ac45b496cb1f3d465537718a
Size

53KB
MD5

d17768ef06fd0e26dcbfefda22861982
SHA1

5303e50f5df03c27408b122f90c29a2c6f2021f5
SHA256

92956a34e6776cb4971ebe3cf97e89087672ba28ac45b496cb1f3d465537718a
SHA512

c33b8dbc5f0a3a5b8938863e58ef05325c93be3d96025516a1b13f839d40dd448c1a469aae0da6e67115c9387582ff8ac4bc30009a3bc9dff7f9554e42acc514
SSDEEP

1536:C8h7ywchhrkj9aMTHThr6/EZza4CF1tejA3jTjtqtver:C8k5MrFunfDtejATTBw2

Score

N/A

Malware Config

Signatures

Files

92956a34e6776cb4971ebe3cf97e89087672ba28ac45b496cb1f3d465537718a
.exe windows x86

a8c5917d422790953cc79e55cb3ea185

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32First
OpenFile
GetStartupInfoA
HeapValidate
FindNextVolumeW
WriteProfileSectionA
ReplaceFileA
SetErrorMode
WriteConsoleW
ClearCommError
ReadProcessMemory
GetHandleInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE