bad42411966bc0616a2db785c43071cef9ad68acdb93f6278c2e138e659b3a85 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bad42411966bc0616a2db785c43071cef9ad68acdb93f6278c2e138e659b3a85
Size

56KB
MD5

45ec298c00cce5277631fd4afc25919d
SHA1

51a1c2095fa2b4088b5157df0654c076b56ac277
SHA256

bad42411966bc0616a2db785c43071cef9ad68acdb93f6278c2e138e659b3a85
SHA512

3e62254551d561a43eef69d82df6d8dc4b7e3f742160bc9e8ec04d95561e003b21bd7c34484a2f82427edfb18238603233bb1517b370b6092dee3cbbf086cf2a
SSDEEP

1536:EAAAAzXkyt6UzEMu8jldTNvJxP4MkApxlmACaQ:0FzEMuGhxp+a9Q

Score

N/A

Malware Config

Signatures

Files

bad42411966bc0616a2db785c43071cef9ad68acdb93f6278c2e138e659b3a85
.exe windows x86

0482fc57a6e11999a002001a1ed52c00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlZeroMemory
FindActCtxSectionStringA
SetVolumeLabelA
EnumLanguageGroupLocalesA
OpenConsoleW
EnumTimeFormatsA
HeapCompact
UTUnRegister
Module32FirstW
GetConsoleWindow
FindActCtxSectionStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE