798db0a52327066740b90b1a6838ece531845b7af81ef265c2070395f0e6626f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

798db0a52327066740b90b1a6838ece531845b7af81ef265c2070395f0e6626f
Size

119KB
MD5

67ead7fcf033ffd330b29611de847f49
SHA1

793ff8d962983a3e31c8f30e8d147ce2019a19f1
SHA256

798db0a52327066740b90b1a6838ece531845b7af81ef265c2070395f0e6626f
SHA512

2941f8ccff1a20c00fa0d64ee56c7a99a846c3bdb4e305a533fd9a5929ec73c878d7bc5afc44ba78fd2fb32f0709e39280a41588800694f4fec00eeaac785fd4
SSDEEP

3072:Mr7YfqK6rfWzohc4tJG8XKh7MQ3kVf+dSf3+l2hqW/ovH0lvJ:Mr7UqK6jWWf4hMQym8o2VQo

Score

N/A

Malware Config

Signatures

Files

798db0a52327066740b90b1a6838ece531845b7af81ef265c2070395f0e6626f
.exe windows x86

4163702dafdcb81329187527c16a6f47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
CmdBatNotification
WriteConsoleOutputW
InitializeCriticalSectionAndSpinCount
SetEndOfFile
GetCurrentProcessId
NlsConvertIntegerToString
OpenWaitableTimerW
DeleteTimerQueueEx
CreateHardLinkA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE