c44b50492fb2d3429450eb4a50bc6788bfd7613f8685ce3f2b12e69760cbe97a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c44b50492fb2d3429450eb4a50bc6788bfd7613f8685ce3f2b12e69760cbe97a
Size

56KB
MD5

c8de13f647f7ea911ea70cfcf499fc36
SHA1

2ed39d3de585ffbaf6ff7af5845cb17650d6eb3f
SHA256

c44b50492fb2d3429450eb4a50bc6788bfd7613f8685ce3f2b12e69760cbe97a
SHA512

233ccebc6fab304bfd2043a9108cbfe047e1369877fe8b722bb2cdb705f222cc6751b62ddb25db0e579a987075e9097deb0b3d169af00a0d10eabef39903122f
SSDEEP

1536:qwiS6JhThSvXr4sY4v571cMVU3AiZTYxz0NEA63J:dibJhTQUsYW5hcwUX9Yx0EAw

Score

N/A

Malware Config

Signatures

Files

c44b50492fb2d3429450eb4a50bc6788bfd7613f8685ce3f2b12e69760cbe97a
.exe windows x86

d4d92f82aedda33a923940a5c5c74bad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWriteWatch
SetDefaultCommConfigA
DnsHostnameToComputerNameA
FindNextVolumeW
HeapCompact
RtlCaptureStackBackTrace
SetMessageWaitingIndicator
CreateThread
ReadConsoleInputW
RemoveLocalAlternateComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE